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Independent Orbiter Assessment 
Assessment of the Data Processing System FMEA/CIL 


1 . 0 EXECUTIVE SUMMARY 

The McDonnell Douglas Astronautics Company ( MDAC ) was selected in 
June 1986 to perform an Independent Orbiter Assessment (IOA) of 
the Failure Modes and Effects Analysis ( FMEA ) and Critical Items 
List (CIL). Direction was given by the STS Orbiter and GFE 
Projects Office to perform the hardware analysis using the 
instructions and ground rules defined in NSTS 22206 , Instructions 
for Preparation of FMEA and CIL , 10 October 1986 . 

The IOA effort first completed an analysis of the Data Processing 
System (DPS) hardware, generating draft failure modes and poten- 
tial critical items. To preserve independence, this analysis was 
accomplished without reliance upon the results contained within 
the NASA FMEA/CIL documentation. The IOA results were then 
compared to the NASA FMEA/CIL baseline with proposed Post 51-L 
updates included. A resolution of each discrepancy from the 
comparison is provided through additional analysis as required. 
This report documents the results of that comparison for the 
Orbiter DPS hardware. 

The IOA product for the DPS analysis consisted of one hundred 
twenty-two failure mode "worksheets" that resulted in twenty- 
three potential critical items being identified. Comparison was 
made to the NASA baseline (as of 19 November 1986) which 
consisted of seventy-eight FMEAs and twenty-five CIL items. The 
comparison determined if there were any results which had been 
found by the IOA but were not in the NASA baseline. This 
comparison produced agreement on all but four FMEAs which caused 
differences in two CIL items. Figure 1 presents a comparison of 
the proposed Post 51-L NASA baseline, with the IOA recommended 
baseline, and any issues. 

The issues arose due to differences between the NASA and IOA 
FMEA/CIL preparation instructions. NASA had used an older ground 
rules document which has since been superseded by the NSTS 22206 
used by the IOA. ' After comparison, there were no discrepancies 
found that were not already identified by NASA, and the remaining 
issues may be attributed to differences in ground rules. 
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DPS FMEA/CIL ASSESSMENT OVERVIEW 



Figure 1 - DPS FMEA/CIL ASSESSMENT 
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2 . 0 INTRODUCTION 


2.1 Purpose 

The 51-L Challenger accident prompted the NASA to readdress 
safety policies, concepts, and rationale being used in the 
National Space Transportation System (NSTS). The NSTS Office has 
undertaken the task of reevaluating the FMEA/CIL for the Space 
Shuttle design. The MDAC is providing an independent assessment 
of the proposed Post 51-L Orbiter FMEA/CIL for completeness and 
technical accuracy. 

2.2 Scope 

The scope of the independent FMEA/CIL assessment activity 
encompasses those Shuttle Orbiter subsystems and GFE hardware 
identified in the Space Shuttle Independent FMEA/CIL Assessment 
Contractor Statement of Work. Each subsystem analysis addresses 
hardware, functions, internal and external interfaces, and 
operational requirements for all mission phases. 


2.3 Analysis Approach 

The independent analysis approach is a top-down analysis 
utilizing as-built drawings to breakdown the respective subsystem 
into components and low-level hardware items. Each hardware item 
is evaluated for failure mode, effects, and criticality. These 
data are documented in the respective subsystem analysis report, 
and are used to assess the proposed Post 51-L NASA and Prime 
Contractor FMEA/CIL. The IOA analysis approach is summarized in 
the following Steps 1.0 through 3.0. Step 4.0 summarizes the 
assessment of the NASA and Prime Contractor FMEA/CIL which is 
documented in this report . 


Step 1.0 Subsystem Familiarization 

1.1 Define subsystem functions 

1.2 Define subsystem components 

1.3 Define subsystem specific ground rules and 
assumptions 

Step 2.0 Define subsystem analysis diagram 

2.1 Define subsystem 

2.2 Define major assemblies 

2.3 Develop detailed subsystem representations 

Step 3.0 Failure events definition 

3.1 Construct matrix of failure modes 

3.2 Document IOA analysis results 
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Step 4.0 Compare IOA analysis data to NASA FMEA/CIL 

4.1 Resolve differences 

4 . 2 Review in-house 

4.3 Document assessment issues 

4.4 Forward findings to Project Manager 


2.4 Ground Rules and Assumptions 

The ground rules and assumptions used in the IOA are defined in 
Appendix B. The subsystem specific ground rules were defined to 
limit the analysis to single-failed-parts for each failure mode. 

A subset of the failure mode keywords were identified for the DPS 
team. This allowed for commonality in the analysis results. 
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3 . 0 SUBSYSTEM DESCRIPTION 

3.1 Design and Function 

The DPS consists of that hardware required for data acquisition, 
data manipulation, data display, and data transfer on the 
Orbiter, and includes the five onboard computers and their 
interfaces. Reference Figure 2. More specifically, the DPS 
consists of the following components: 


1 . Twelve MDM units which convert and format data at the 
remote locations. Each MDM has internal redundancy and 
consists of a Multiplexer Interface Adapter (MIA) , 
Sequential Control Unit (SCU), Input/Output Module, 
Analog To Digital Converter, and Power Supply. They 
convert and format serial digital GPC commands into 
parallel discrete, digital, and analog data for 
transfer to vehicle subsystem hardware. They also 
convert and format parallel discrete, digital, and 
analog data from vehicle subsystems into serial digital 
data for transmission to the GPCs. Reference Figure 3. 

2. Five GPCs each consisting of a Central Processing Unit 
(CPU) and Input/Output Processor (IOP). The CPU 
functionally consists of an Arithmetic Logic Unit, 

Local Store, Master Bus Control Unit, Data Flow 
Multiplexer, Micro-code control unit, CPU Timer, 
Interrupt Logic, Main Memory Timing Page, Timers, 
Address Bus Control, Main Memory, and Power Supply. 

The IOP contains Control Monitor, IOP Main Memory, 
Channel Control, Direct Memory Access Queue, Arithmetic 

v Logic Units, Local. Store, Micro-code store and Decode,. 
MIAs, and Time-slice and Multiplexing; One of the 
functions of the GPCs is to support guidance, 
navigation, and control requirements of the vehicle. 

' They provide for the monitoring and control of vehicle 
subsystems. They also check for data transmission 
errors and crew input error. Vehicle system failures 
and out-of-tolerance conditions are annunciated by the 
GPCs . Reference Figure 4 and Figure 5 . 

3. The MCDS consists of three Keyboard Units (KU), four 
Display Units (DU) and four Display Electronics Units 
(DEU). Each KU has- Keys, Switches and Lights. The DU 
consists of X/Y Deflection Amplifiers, Video 
Amplifiers, Cathode-Ray Tube, BITE and Power Supplies. 
The DEU has an Oscillator, Memory, Key-board Adapter, 
Symbol Generator, MIA, Control Logic, BITE, Load 
Switch, and Power Supplies. The subsystem provides for 
crew/vehicle interface via a keyboard and CRT display. 
The crew can interact with the subsystems with keyboard 
entries and executions. Reference Figure 6 and Figure 
7 . 
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4. Thirty serial digital data buses are connected to the 

Bus Terminal Units (BTUs) via 227 DBCs. The DBCs are 
shown in Figure 8 . : 

5. Two DBIAs provide the amplification necessary to drive 
the stubs and provide isolation when the stubs are 
opened or shorted at the umbilicals. 

6. Two MMUs contain MIAs, Read Electronics, Write 
Electronics, Mass Memory Control Logic, Power Supply 
with Switch, Tape Transport Mechanism with motor, tape 
and heads . The mass memory unit stores programs for 
loading into the GPCs and the MCDS. Reference Figure 9. 

7 . Three EIUs provide status and command capability of the 
main engi nes . Each EIU contains a MIA, BITE, Status 
Buffer, Controller Interface Adapter’ Operational 
Interface Element, Data Status and Power Supply. The 
EIU transfers main engine control commands from the GPC 
and main engine status for use by the GPC, the GSE 
launch processing system, and the operational 
instrumentation system. Reference Figure 10. 


The DPS interfaces with many onboard Orbiter systems including 
the Main Propulsion System, Solid Rocket Bo oste rs , Reaction 
Control System ( RCS ) , Orbital Maneuvering System (OMS), Air 
Surface Controls used for guidance and control. Nose-wheel 
Steering, and the Master Timing Unit. 


3.2 Interfaces and Locations 

The DPS hardware is located throughout -the OrELter. The 
composite data bus network provides the hardware interfaces 
between the GPCs and all other avionics subsystems that 
'communicate via a digital data format. Reference Figure 11. 

GPCs 1 and 4 are located in Avionics Bay 1 while GPCs 2 and 5 are 
located in Avionics Bay 2, to provide separation of redundancy. 
GPC 3 is located in Avionics Bay 3 . Each G PC interfaces to all 
Flight Critical MDMs , however only one GPC normally communicates 
to only one FF and one FA MDM during ascent and entry dynamic 
flight. 


3.3 Hierarchy 

Figure 2 illustrates the hierarchy of the DPS hardware and the 
corresponding subcomponents. Figures 3 through 10 comprise the 
detailed system representations. 
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DATA PROCESSING SUBSYSTEM OVERVIEW 



Figure 2 - DPS SUBSYSTEM OVERVIEW 
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CENTRAL INPUT/OUTPUT 

PROCESSING PROCESSOR 
UNIT 

(1 per GPC) (1 per GPC) T~ | DPS Interface but not considered 
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DPS MULTIPLEXER/DEMULTIPLEXER 
























DPS GPC - CENTRAL PROCESSING UNIT 



Figure 4 - DPS GPC CENTRAL PROCESSING UNIT (CPU) 
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CPU TIMING 1 POWER SUPPLY 




DPS GPC - INPUT/OUTPUT PROCESSOR 



Figure 5 - DPS GPC INPUT/OUTPUT PROCESSOR (IOP) 
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DPS MCDS FUNCTIONAL BLOCK DIAGRAM 



























DPS MCDS 
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LOAD SWITCH 
































DPS DATA BUS COUPLERS 
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Figure 8 - DPS DATA BUS COUPLERS (DBC) 
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DPS ENGINE INTERFACE 



15 


STATUS BUFFER- 1 











DATA PROCESSING SUBSYSTEM 



Figure 11 - DPS FUNCTIONAL INTERFACES AND LOCATIONS 
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4.0 ASSESSMENT RESULTS 


The IOA analysis of the DPS hardware initially generated eighty- 
five failure mode worksheets and identified two Potential 
Critical Items (PCIs) before starting the assessment process. In 
order to facilitate comparison, thirty-seven additional failure 
mode analysis worksheets were generated. These analysis results 
were compared to the proposed NASA Post 51-L baseline of seventy- 
eight FMEAs and twenty-five CIL items, which was generated using 
the Rockwell 100-2G FMEA/CIL instructions. Upon completion of 
the assessment, sixty of the seventy-eight FMEAs were in 
agreement. Of the eighteen that remained, fourteen had minor 
discrepancies that did not affect criticality. Of the remaining 
four, two issues were with FMEAs { 05-5-B03-1-1 and 05-5-B03-2-1 ) 
that had considered failure modes outside the DPS subsystem, and 
caused inflated criticalities. These criticalities mistakenly 
placed both FMEAs on the CIL. The other two issues were with 
FMEAs (05-5-B01-1-1 and 05-5-B02-1-1 ) that also considered 
failure modes outside the DPS subsystem. However, when the 
correct failure mode is included, the current criticalities will 
remain unchanged. In summary, all issues may be attributed to 
differences between ground rules in Rockwell 100-2G and 
NSTS 22206 instructions. The TOA. recommends correcting the 
failure modes considered in the four FMEAs, which lowers 
criticality assignments in two of the FMEAs, and removes them 
from the CIL. 

A summary of the quantity of NASA FMEAs assessed, versus the 
recommended IOA baseline, and any issues identified is presented 
in Table I . 


+ + 

| Table I Summary of IOA FMEA Assessment j 

H — + — — — + — — — — — — — — — — — — — + — — — — + 

| Component | NASA | • IOA | Issues | 

+- — ■ + — + : + + 


MDM 

14 

14 

GPC 

25 

25 

MCDS 

23 

23 

DBC 

1 

1 

DBIA 

2 

2 

MMU 

9 

9 

EIU 

4 

4 


+ — — — — — + — — — 4 '- — — — — — — — — — — — — + 

| TOTAL | 78 | 78 | 4 | 

+ + + + — + 
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A summary of the quantity of NASA CIL items assessed, versus the 
recommended IOA baseline, and any issues identified is presented 
in Table II. 


+ * + 

j Table II Summary of IOA CIL Assessment | 

+ + + + + 


Component 

j 

NASA | IOA | Issues | 

L _1_ _1_ _L_ 

MDM 

GPC 

MCDS 

DBC 

DBIA 

MMU 

EIU 

J 

r h 

10 

6 

3 
1 

1 

4 

L J 

r n 

8 

6 

3 
1 

1 

4 

L J 

r ~r 

2 

TOTAL 

25 23 

2 | 


+ + — + — 

Appendix C presents the detailed assessment worksheets for each 
failure mode identified and assessed. Appendix D highlights the 
NASA Critical Items arid corresponding IOA worksheet ID. Appendix 
E contains the IOA analysis worksheets that were used to assess 
the NASA FMEA/CIL. Appendix F provides a cross reference between 
the NASA FMEA and corresponding IOA worksheet ( s ) . IOA 
recommendations are also summarized. 

Table III presents a summary of the IOA recommended -failure 
criticalities for the Post 51-L FMEA baseline. Further 
discussion of each of these subdivisions and the applicable 
failure modes is provided in subsequent paragraphs. 


+ — + 

| TABLE III Summary of IOA Recommended Failure Criticalities | 


Criticality : 

1/1 

2/1R 

2/2 

3/1R 

3/2R 

3/3 

TOTAL 

MDM 

_ 

4 

— 

6 

2 

2 

14 

GPC 

- 

5 

- 

9 

1 

10 

25 

MCDS 

- 

3 

- 

14 

1 

5 

23 

DBC 

- 

1 

- 

- 

- 

- 

1 

DBIA 

- 

- 

- 

- 

1 

1 

2 

MMU 

- 

- 

1 

- 

6 

2 

9 

EIU 

2 

2 

- 

- 

- 

- 

4 


+ + + + + + + + + 

| TOTAL | 2 | 15 | 1 | 29 | 11 | 20 | 78 | 

+ + + + + + — + + + 
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IlM III! 


Of the failure modes analyzed, twenty-three were determined to be 
critical items. A summary of the IOA recommended critical items 
is presented in Table IV . 


TABLE IV Summary of IOA Recommended Critical Items 


Criticality : 

H 

1/1 

2/1R 

— 
2/2 ' 

h H 

3/1R 

H 

3/2R 

-| 

3/3 

+ 

TOTAL 

MDM 

— 

4- 

- 

4 

- 

- 

8 

GPC 

- 

5 

- 

1 

— 

— 

6 

MCDS 

- 

3 

- 

- 

— 

— 

3 

DBC 

- 

1 

- 

— 

— 

— 

1 

DBIA 

- 

- 

- 

- 

— 

— 


MMU 

- 

- 

1 

- 

— 

— 

1 

EIU 

2 

2 

- 

- 

- 

— 

4 


i 

r 

L _ _ 



«l 


TOTAL 

h — 1 

! 2 

1 15 

r 

1 i 

! 5 

r i 

i - 

1 * 

1 23 1 


1- 

h 

f- — 

H H 

1- H 

h 

h + 


The scheme for assigning IOA assessment (Appendix C) and analysis 
(Appendix E) worksheet numbers is shown in Table v. 


Table v IOA Worksheet Numbers 

Component | 

IOA ID Number 

MDM 

DPS-100 to DPS-195 

GPC 

DPS-201 to DPS-232 

MCDS 

DPS- 300 to DPS-321 (includes DBC and- DBIA) 

MMU 

DPS-400 to DPS-417 

EIU 

H 

DPS-501 to DPS-509 
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4.1 Assessment Results MDM ' : 

The IOA has a total of forty-two assessment worksheets associated 
with the fourteen NASA MDM FMEAs ; excluding the OF, OA, LL, and 
LR MDM groups, as shown in Figure 3. The IOA worksheets 
correspond to nine different failure modes for each of' the four 
groups of MDMs, plus six worksheets that are power related. The 
numbering scheme is shown in the table below. 


IOA ID : 

Range 


DPS-100 

to 

108 

FF 

DPS-120 

to 

128 

FA 

DPS-140 

to 

148 

PF 

DPS-180 

to 

188 

LF , LA 

DPS-190 

to 

195 

Power 


Item Group 

- Flight Forward 

- Flight Aft 

- Payload Forward 


resistors 


Three basic failure modes were found: Loss of Output, Erroneous 
Output, and Premature Operation ^ A failure mode may have a 
different effect, and thus a different criticality, if applied 
separately to both output sides of a MDM; that is, a MDM's out- 
puts to GPCs and LRUs (such as sensors and effectors). Thus it 
was decided to treat each output side separately for each basic 
failure mode, resulting in six failure modes; such as "Loss of 
Output to GPC" and "Loss of Output to LRU". As it turned out, 
the effects were somewhat different but’ the criticalities 
remained the same. 


Three other failure modes were added which were considered 
applicable to only one out put. These are "Selected All Channels 
Wrong to LRU" (worksheets DPS-106, 126, 146, and 186), "Stuck on 
a Constant Output to LRU" (DPS-107, 127, 147, and 187), and 
"Falsely Stuck on Busy Mode" to GPC (DPS-108, 128, 148, and 188). 
The first two specific failure modes could be considered special 
cases of "Erroneous Output to LRU", and the third failure mode 
could be considered a special case of "Loss of Output to GPC" . 
They were considered on the possibility that the specific cases 
would differ in effects and criticality from the general cases. 
Again, the result was that these specific cases differed in their 
effects but not in their criticalities from the general cases. 

The NASA FMEAs considered general failure modes, consequently 
each output and specific cases were not covered uniquely. This 
resulted in one (NASA FMEA ) to many (IOA worksheets) relation- 
ships, as shown in the following table. This table shows how the 
NASA FMEAs and IOA worksheets associated with MDMs map onto each 
other. 
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Failure 

Mode 

Item 

NASA 

FMEAS 

IOA Assessment 
Worksheets (Append 

Loss of 

FF 

05-5-B0 3-2-1 

100, 

101 , 

108 


Output 

FA 

05-5-B0 3-1-1 

120, 

121, 

128 



PF 

05-5-B0 3-5-1 

140, 

141, 

148 



LF,LA 

05-5-B0 3-4-1 

180, 

181, 

188 


Erroneous 

FF 

05-5-B0 3-2-2 

102, 

103, 

106, 

107 

Output 

FA 

05-5-B0 3-1-2 

122, 

123, 

126, 

127 


PF 

05-5-B0 3-5-2 

142, 

143, 

146 , 

147 


LF,LA 

05-5-B0 3-4-2 

182, 

183, 

186, 

187 

Premature 

FF 

no map 

104, 

105 



Output 

FA 

no map 

124, 

125 




PF 

no map 

144, 

145 




LF , LA 

no map 

184, 

185 



Miscell- 

Resistor 

05-6S-BRES3-1 

190 




aneous 

RPC 

05-6S-BRPC3-1 

191 





RPC 

05-6S-BRPC3-2 

192 





Switch 

05-6S-BSW3 -1 

193 





Switch 

05-6S-BSW3 -2 

194 





Switch 

05-6S-BSW5 -3 

195 





The number of FMEAs and CILs by criticality are summarized in the 
following table. The Unmapped IOA column is the raw number of 
IOA analysis worksheets. The Mapped IOA column is the number of 
IOA analysis worksheets after they have been mapped onto the NASA 
FMEAs . 


Unmapped Mapped 


Criticality 

IOA 

IOA 

NASA 

IOA CILS 

Issues 

2/1R 

15 

4 

6 

4 

2 

2/2 

0 

0 

0 

0 

0 

3/1R 

16 

6 

4 

4 

0 

3/2R 

9 

2 

2 

0 

0 

3/3 

2 

2 

2 

0 

0 

Total 

42 

14 

14 

8 

2 


The NASA FMEAs also covered power related items associated with 
the MDMs , including Remote Power Controllers (RPCs), Power 
Switches, and Current Limiting Resistors. IOA did not cover 
these items in the original analysis due to time constraints, but 
did cover them later, concurring with NASA's reevaluation of 
these six. IOA's DPS subsystem team did not cover the 
Operational Instrumentation Forward and Aft (OA and OF) MDMs, 
since they were considered to be in the domain of IOA's 
Instrumentation subsystem team. IOA and NASA also did not cover 
the Launch Left and Launch Right (LL and LR) MDMs since they are 
within the SRBs . 
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The difference in the number of FMEAs is due to the fact that IOA 
considered more specific failure modes than NASA. Another 
difference is that NASA did not consider the "Premature Operation 
to GPC" and "Premature Operation to LRU" failure modes for MDMs . 
This however is not an issue since the criticality of the 
function of the hardware item (2/1R) was not increased by these 
failure modes. Also, after further analysis these failure modes 
are considered to be non-credible. 

The criticalities for the LF and LA MDMs (3/2R) were the same for 
IOA and NASA. For the FF, FA, and PF MDMs however, IOA's 
criticalities (3/1R) were lower than NASA's criticalities (2/1R). 
Part of this difference is due to whether the effects of multiple 
unrelated failures were taken into account. The NASA, using the 
Rockwell 100-2G hardware criticality 2 ground rules, considered 
in FMEAs 05-5-B0 3-1-1 and 05-5-B03-2-1 , a MDM failure and then 
considered an Aero Surface Amplifier (ASA) next related failure 
outside the DPS subsystem, whereas, the IOA, using NSTS 22206 , 
considered in assessment worksheets DPS-100, DPS-101, DPS-108, 
DPS-120, DPS-121 , and DPS-128, a MDM failure and then considered 
the next redundant item failure to be another MDM. The IOA does 
not concur with these two NASA reevalu ations ♦ The IOA believes 
the hardware criticality should be downgraded to three, thereby 
removing these two FMEAs from the CIL. The IOA concurred with 
the remaining twelve FMEAs . 
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4.2 Assessment Results GPC 


The GPC analysis was subdivided into IOP and CPU failures. 
Generic black box failures were analyzed with causes stemming 
from failures of the subcomponents such as the MIA, as shown in 
Figure 4 and Figure 5 . IOA has analyzed twenty— five failure 
modes (FMEAs) related to the General Purpose Computers (GPCs). 
Four of these FMEAs are attributable to the Input /Output 
Processors (IOP), eleven are related to the Central Processing 
Units (CPU), and the remaining ten affect various EPD&C switch 
functions associated with the GPC. NASA wrote twenty-five GPC 
related FMEAs: two CPU related, two IOP related, five switch 
related, four GPC status related, and two GPC power related. 

The following table is a summary of the GPC related FMEA 
criticalities including the results of the DPS Pre-board: 


Criticality 

IOA 

NASA 

2/1R 

5 

5 

3/1R 

9 

9 

3/2R 

1 

1 

3/3 

10 

10 

Total 

25 

25 


IOA CILs 

5 
l 
0 
0 

6 


Issues 

2 

0 

0 

0 

2 


The seven NASA proposed individual power component failures 
(FMEA 05-6S-BDIOX-1, 05-6S-BDMC1-1 , 05-6S-BDMC1-2 , 05-6S-BFUS1-1 , 
05-6S-BRES1-1 , 05-6S-BRPC1-1, and 05-6S-BRPC1-2 ) were analyzed, 
along with the four failures of the GPC status indicators. These 
failure modes are covered in Appendix E. 


Of the five switch related failures analyzed by NASA, the CPU 
Output Switch FMEAs (05-5-B15-1-1 and 05-5-B15-1-3 ) agree with 
the IOA assessment (DPS-211) as does the Mode Switch FMEA 
( 05-5-B17-1-1 , DPS-210). One GPC Power Switch FMEA 
(05-6S-BSW1-2 ) written by NASA is confirmed by a similar IOA FMEA 
(DPS-216) as criticality 3/1R; the newly-proposed GPC Power 
Switch FMEA ( 05-6S-BSW1-3 ) is consistent with the IOA analysis 
DPS- 21 7 . IOA agrees with the assessment that inadvertent power 
switch opening has the same effects as CPU Loss of Output 
( 05-5-B0 1-1-1 ) . 


The NASA and IOA analyses of the CPU and IOP erroneous output 
FMEAS ( 05-5-B0 1-1-2 , 05-5-B02-1-2 , DPS-206 and DPS-202, 
respectively) are identical in criticality 3/1R, as are the 
analyses of the inadvertent command outputs from the IOP with 
criticality 2/1R ( 05-5-B02-1-3 , DPS-225). An IOA analysis of 
erroneous data inputs to the IOP (DPS-204) brought similar 
effects with 3/1R criticality. 
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The IOA analyzed a failure mode (DPS-208) on the CPU which was 
not considered by NASA. This 2/1R failure is similar in effect 
to the IOP inadvertent command output failure ( 05-5-B02-1-3 ) : CPU 
attempts to output data on incorrect bus due to errors in memory 
locations containing configuration or bus-stringing parameters 
(e.g. the Nominal Bus Assignment Table), in this case two output 
data channels would be lost simultaneously and the actuators 
would not be able to select the correct data paths . IOA 
determined this to be. a non-credible failure mode during the 
assessment process. 

The NASA analysis of the CPU "Loss Of Output" (05-5-B01-1-1 ) has 
a criticality of 2/1R. IOA analysis 205, using the NSTS 22206 
does not take into account the effects of multiple unlike 
failures outside the DPS subsystem. IOA does not agree with the 
effects assigned by NASA. The IOA recommends changing the 
effects to delete the sentence "During ascent/entry , this...". 

The IOA does concur with the rest of NASA's reevaluation and 
rationale. 

The NASA analysis of the IOP "Loss of Output" ( 05-5-B02-1-1 ) has 
a criticality of 2/1R. Initially, the IOA analysis 201 'assigned 
a hardware criticality of 3 for this failure mode. The IOA does 
not believe a single IOP failure would cause loss of mission. 

The second failure of an IOP would not result in loss of 
crew/vehicle. However, NASA's failure effects coupled this 
failure with an undetected ASA failure (outside the DPS 
subsystem) . This could result in two healthy paths being voted 
out. This could possibly cause loss of vehicle. Simultaneous 
dissimilar failures were excluded from the IOA. Multiple 
failures are inconsistent with the NSTS 22206 . The IOA 
recommends changing the effects to delete the sentence "During 
ascent/entry , this...". The IOA does concur with the rest of 
NASA's reevaluation and rationale. 
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4.3 Assessment Results MCDS 


The MCDS consists of the KU, DU, and DEU. Functional failures of 
components were analyzed. These components are shown 
functionally in Figure 6 and Figure 7. Nine failure modes were 
identified, thirty IOA assessment worksheets and twenty-one IOA 
analysis worksheets were generated. These were then compared to 
the twenty-three NASA FMEAs . The difference in the total number 
of FMEAs may be attributed predominantly to the fact that NASA 
has one FMEA per failure mode whereas IOA has multiple failure 
modes per worksheet. The additional seven IOA assessment work- 
sheets yielded no additional unique FMEAs and are not included in 
the comparison FMEA count. They are included in the Appendices 
for completeness. No issues were identified. 


Number of FMEAs by criticality 


Criticality IOA 
27lR 3 

3/1R 15 

3/3 5 

Total 23 


NASA IOA CIL 

3 3 

15 0 

5 0 

23 3 


Issues 

0 

0 

0 

0 


4.4 Assessment Results DBC 

Thirty serial digital data buses connect the GPC IOPs to the BTUs 
via 227 DBGs . The DBCs ' functional components are shown in 
Figure 0. Two failure modes were identified and one worksheet 
was generated. No issues were identified. 


Number of FMEAs by criticality 
Criticality IOA NASA IOA CIL Issues 

27Tr i .1 l o 


4.5 Assessment Results DBIA 

The DBIAs consists of components required to provide isolation 
between the Orbiter Launch/Boost Data Buses and the SRBs and 
associated GSE . Four failure modes were identified and two 
worksheets were generated. No issues or CILs were identified. 


Number of 
Criticality IOA 

T72R 1 

3/3 1 


FMEAs by criticality 

NASA IOA CIL 

1 0 

1 0 


Issues 

0 

0 
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4 . 6 Assessment Results MMU 

The MMU analysis investigated failures in the individual 
components of power supply, read and write electronics, tape 
transport mechanism, MIA and control logic. These are shown 
functionally in Figure 9. The power switch and RPC were also 
investigated. Most of the failures were criticality 3/2R. One 
critical item was identified. 

Number of MMU 'related FMEAs by criticality 


Criticality IOA NASA IOA CIL Issues 

272 ~ ~ 1 0 

3/2R 6 6 0 0 

3/3 2 2 0 0 

Total 9910 


The IOA 400 through 407, 411 and 412 correspond to NASA FMEAs 
05-5-B04-2-1 and 05-5-B04-2-2 . These FMEAs are concerned with 
malfunctions of the MMU unit itself. The difference in number of 
FMEAs is due to the fact that the IOA analysis considered 
failures of individual components of the MMU, such as the tape 
transport mechanism. There was no significant difference in the 
results. Both IOA and NASA found the criticality to be 3/2R. 

Four NASA FMEAs ( 05-6S-BRPC2-1 , 05-6S-BSW2-1 , 05-6S-BSW2-2 , and 
an as yet unnumbered new item) correspond to IOA FMEAs 408, 409, 
and 410. These FMEAs deal with failures of the MMU power 
switches and RPCs. The only difference in the results in this 
group is that IOA found the switch failure mode which causes the 
MMU to remain permanently on to be criticality 3/3 rather than 
3/2R . The NASA agreed with this criticality in their reevalua- 
tion report. 

The IOA FMEA 415 corresponds to NASA FMEA 05-5-B20-1-1 . This 
FMEA deals with failure of the GPC IPL source switch. Both IOA 
and NASA found the criticality to be 2/2. - This is the only CIL 
item associated with the MMUs . 

The NASA FMEAs 05-5-B16-1-1 (GPC IPL switch, criticality 3/2R), 
05-5-B18-1-1 (GPC IPL indicator, criticality 3/3), and 
05-6S-BRES2-1 (current limit resistor, criticality 3/2R) were 
analyzed by IOA and are contained in Appendix E. No issues were 
identified. 
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4.7 Assessment Results EIU 


There were no differences between the hardware and functional 
criticalities assigned by IOA and NASA on the baseline FMEAs of 
the Engine Interface Unit (EIU). 

Number of EIU related FMEAs by Criticality. 


Criticality IOA 

ITT “ 0 " 

2/1R 0 

3/1R _5 

Totals 5 


NASA IOA CILs Issues 
2 2 0 

2 2 0 

_0 _0 _0 

4 4 0 


The NASA presented at the Level III Pre Board (12th and 15th of 
September, 1986) requests to upgrade the two existing FMEAs from 
3/1R to 2/1R. The rationale presented was for a heavy payload. 
The loss of one engine can cause loss of mission. The IOA can 
accept this upgrade of criticality based upon a combined payload 
and vehicle weight requiring three main engines to achieve 
mission orbit goals. 


The second upgrade was requested against the power circuit. The 
loss of the second circuit causes loss of the .EIU. The worst 
case failure would occur during the last 10 seconds prior to MECO 
when the crew may not have enough time to respond to manual 
engine shutdown. This could cause an engine to have fuel or 
oxidizer depletion with engine running. Previous tests have 
indicated that pumps fail due to cavitation. In fact, the engine 
turbine pumps have exploded from cavitations. The IOA agrees 
with this upgrade and rationale. 


There were two new FMEAs proposed by NASA at the pre-board with 
criticalities of 1/1.- The first was for a failure mode of 
erroneous output to the GPC. The GPC would then command the pre- 
valves to close with the engine running. That would cause the 
high pressure turbine pumps to throw turbine blades which have 
caused uncontained engine failures . The engine explodes and the 
crew and vehicle are lost. 


The second proposed FMEA deals with the failure of the power 
switch. The failure mode was both contacts shorted to ground. 

The loss of power to the EIU causes loss of control of engine 
throttling and shutdown. If failure occurs in the last six to 
ten seconds before MECO, the crew would have to manually shutdown 
the engines. The engines would ingest gas causing pump 
cavitation and disintegration. This results in loss of crew and 
vehicle . 

Four additional failure modes were analyzed by IOA, but following 
the pre-board these modes were found to be covered by one of the 
original baseline FMEAs . 
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APPENDIX A 
ACRONYMS 


A/D 

- 

Analog to Digital 

AID 

- 

Analog Input Differential 

AIS 

- 

Analog Input Single-ended 

ALU 

- 

Arithmetic Logic Unit 

AOA 

- 

Abort Once Around 

AOD 

- 

Analog Output Differential 

ASA 

- 

Aero Surface Amplifier 

ATO 

- 

Abort To Orbit 

BFC 

- 

Backup Flight Controller 

BFS 

- 

Backup Flight System 

BITE 

- 

Built-In Test Equipment 

BSS 

- 

Backup System Services 

BTU 

- 

Bus Terminal Unit 

Cl 

- 

Critical Item 

CIA 

- 

Controller Interface Adapter 

CICU 

- 

Computer Interface Conditioning Unit 

CIL 

- 

Critical Items List 

CPU 

- 

Central Processing Unit 

CRIT 

- 

Criticality 

CRT 

- 

Cathode Ray Tube 

C&W 

- 

Caution and Warning System 

DBC 

- 

Data Bus Coupler 

DBIA 

- 

Data Bus Isolation Amplifier 

DDU 

- 

Display Driver Unit 

DEU 

- 

Display Electronics Unit 

DIH 

- 

Discrete Input High 

DIL 

- 

Discrete Input Low 

DMA 

- 

Direct Memory Access 

DOH 

- 

Discrete Output High 

DOL 

- 

Discrete Output Low 

DPS 

- 

Data Processing System 

DU 

- 

Display Unit 

EIU 

- 

Engine Interface Unit 

EVA 

- 

Extravehicular Activity 

FA 

- 

Flight Aft 

FCOS 

- 

Flight Control Operating System 

FF 

- 

Flight Forward 

FM 

-* 

Failure Mode 

FMEA 

- 

Failure Mode and Effects Analysis 

GPC 

- 

General Purpose Computer 

GSE 

- 

Ground Support Equipment 

IMU 

- 

Inertial Measurement Unit 

IOA 

- 

Independent Orbiter Assessment 

IOM 

- 

Input/Output Module 

I OP 

- 

Input/Output Processor 

IPL 

- 

Initial Program Load 

KU 

- 

Keyboard unit 
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LA - Launch Aft 

LF - Launch Forward 

LL - Launch Left 

LPS - Launch Processing System 

LR - Launch Right 

LRU - Line Replaceable Unit 

MC - Memory Configuration 

MCDS - Multifunction CRT Display System 

MCIU - Manipulator Controller Inter faceUn it 

MDAC - McDonnell Douglas Astronautics Company 

MDM - Multiplexer/Demultiplexer 

MEC - Main Engine Controller 

MIA - Multiplexer Interface Adapter 

MM - Major Mode 

MMU - Mass Memory Unit 

MTU - Master Timing Unit 

NA - Not Applicable - ■ ■ ~ ■ 

NASA - National Aeronautics and Space Administration 

NSTS - National Space Transportation System 

OA - Oper ati onal Aft . . : ~ 

OF - Operational Forward 

OIE - Operational Interface Element 

OMRSD - Operational Maintenance Requirements and Specifications 
Document 

OMS - Orbital Maneuvering System 

OPS - Operational Sequence 

PCI - Potential Critical Item 

PCM - Pulse Code Modulation 

PF - Payload Forward 

RCS - Reaction Control System . ; .... . - 

RHC - Rotational Hand Controller 

RI - Rockwell International 

RM - Redundancy Management 

RMS - Remote Manipulator System 

RPC - Remote Power Controller 

RS - Redundant Set 

RTLS - Return To Landing Site ' 

SCU - Sequential Control Unit 

SIO - Serial Input/Output 

SM - Systems Management 

SRB - Solid Rocket Booster ; y. ~ as 

SSME - Space Shuttle Main Engine 

STS - Space Transportation System 

SW - Software 

TAC - Tacan «- - • 

TAL - Transatlantic Abort Landing 

TD - Touch Down 

THC - Translational Hand Controller . - ; ; . 

VDC - volts Direct Current 
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B . 3 Subsystem-Specific Ground Rules and Assumptions 
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APPENDIX B 

DEFINITIONS, GROUND RULES, AND ASSUMPTIONS 


B.l Definitions 

Definitions contained in NSTS 22206 , Instructions For Preparation 
of FMEA/CIL , 10 October 1986 , were used with the following 
amplifications and additions. 

INTACT ABORT DEFINITIONS : 

RTLS - begins at transition to OPS 6 and ends at transition 
to OPS 9, post-flight 

TAL - begins at declaration of the abort and ends at 
transition to OPS 9, post-flight 

AOA - begins at declaration of the abort and ends at 
transition to OPS 9, post-flight 

ATO - begins at declaration of the abort arid ends at 
transition to OPS 9, post-flight 

CREDIBLE ( CAUSE ) - an event that can be predicted or expected in 
anticipated operational environmental conditions. Excludes an 
event where multiple failures must first occur to result in 
environmental extremes 

CONTINGENCY CREW PROCEDURES - procedures that are utilized beyond 
the standard malfunction procedures , pocket checklists , and cue 
cards 

EARLY MISSION TERMINATION - termination of onorbit phase prior to 
planned end of mission 

EFFECTS /RATIONALE - description of the case which generated the 
highest criticality 

HIGHEST CRITICALITY - the highest functional criticality 
determined in the phase-by-phase analysis 

MAJOR MODE (MM) - major sub-mode of software operational sequence 
( OPS ) 

MC - Memory Configuration of Primary Avionics Software System 
(PASS) 

MISSION - assigned performance of a specific Orbiter flight with 
payload/obj ective accomplishments including orbit phasing and 
altitude (excludes secondary payloads such as GAS cans, 
middeck P/L, etc.) 


MULTIPLE ORDER FAILURE - describes the failure due to a single 
cause or event of all units which perforin a necessary (critical) 
function 

OFF-NOMINAL CREW PROCEDURES - procedures that are utilized beyond 
the standard malfunction procedures, pocket checklists, and cue 
cards 

OPS - software operational sequence 

PRIMARY MISSION OBJECTIVES - worst case primary mission objec- 
tives are equal to mission objectives 

PHASE DEFINITIONS : 

PRELAUNCH PHASE - begins at launch count-down Orbiter 
power-up and ends at moding to OPS Major Mode 102 (liftoff) 

LIFTOFF MISSION PHASE - begins at SRB ignition (MM 102) and 
ends at transition out of OPS 1 (Synonymous with ASCENT) 

ONORBIT PHASE - begins at transition to OPS 2 or OPS 8 and 
ends at transition out of OPS 2 or OPS 8 

DEORBIT PHASE - begins at transition to OPS Major Mode 
301 and ends at first main landing gear touchdown 

LANDING/ SAFING PHASE - begins at first main gear 
touchdown and ends with the completion of post-landing 
safing operations 
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APPENDIX B 

DEFINITIONS, GROUND RULES, AND ASSUMPTIONS 


B . 2 IOA Project Level Ground Rules and Assumptions 

The philosophy embodied in NSTS 22206 , Instructions for 
Preparation of FMEA/CIL, 10 October 1986 , was employed with the 
following amplifications and additions . 


1. The operational flight software is an accurate 
implementation of the Flight System Software Requirements 
( FSSRs ) . 

RATIONALE: Software verification is out-of-scope of 
this task . - 

2. After liftoff, any parameter which is monitored by system 
management (SM) or which drives any pa rt of the Caution and 
Warning -System (C&W) will support passage of Redundancy 
Screen B for its corresponding hardware item. 

RATIONALE: Analysis of on-board parameter availability 
and/or the actual monitoring by the crew 
is beyond the scope of this task. 

3. Any data employed with flight software is assumed to be 
functional for the specific vehicle and specific mission 
being flown. 

RATIONALE: Mission data verification is out-of-scope of 
this task. 

4. All hardware (including firmware) is manufactured and 
assembled to the design specifications/drawings. 

RATIONALE: Acceptance and verification testing is 

designed to detect and identify problems 
before the item is approved for use. 

5. All Flight Data File crew procedures will be assumed 
performed as written, and will not include human error in 
their performance. 

RATIONALE: Failures caused by human operational error 
are out-of-scope of this task. 
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6. All hardware analyses will, as a minimum, be performed at 
the level of analysis existent within NASA/Prime Contractor 
Orbiter FMEA/CILs, and will be permitted to go to greater 
hardware detail levels but not lesser. 

RATIONALE: Comparison of IOA analysis results with 

other analyses requires that both analyses 
be performed to a comparable level of 
detail . 

7. verification that a telemetry parameter is actually 
monitored during AOS by ground-based personnel is not 
required . 

RATIONALE: Analysis of mission-dependent telemetry 

availability and/or the actual monitoring of 
applicable data by ground-based personnel is 
beyond the scope of this task. 

8. The determination of criticalities per phase is based on the 
worst case effect of a failure for the phase being analyzed. 
The failure can occur in the phase being analyzed or in 

any previous phase, whichever produces the worst case 
effects for the phase of interest. 

RATIONALE: Assigning phase criticalities ensures a 
thorough and complete analysis. 

9. Analysis of wire harnesses, cables and electrical connectors 
to determine if FMEAs are warranted will not be performed 
nor FMEAs assessed. 

RATIONALE: Analysis was substantially complete prior 

to NSTS 22206 ground rule redirection. 

10. Analysis of welds or brazed joints that cannot be inspected 
will not be performed nor FMEAs assessed.. 

RATIONALE: Analysis was substantially complete prior 

to NSTS 22206 ground rule redirection. 

11. Emergency system or hardware will include burst discs and 
will exclude the EMU Secondary Oxygen Pack (SOP), pressure 
relief valves and the landing gear pyrotechnics . 

RATIONALE: Clarify definition of emergency systems to 
ensure consistency throughout IOA project. 
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APPENDIX B 

DEFINITIONS, GROUND RULES, AND ASSUMPTIONS 


B.3 DPS-Specific Ground Rules and Assumptions 

The IOA analysis was performed to the component or assembly level 
of the DPS subsystem. The analysis considered the worst case 
effects of the hardware or functional failure on the subsystem, 
mission, and crew and vehicle safety. 


1. Crew procedures that take the two good FCS channels to 
override following two GPC or two MDM failures are 
considered in assigning criticality. 

RATIONALE: Clarifies standard cockpit procedures that can 
be considered in assigning criticality. 


APPENDIX C 
DETAILED ASSESSMENT 

This section contains the IOA assessment worksheets generated 
during the assessment of this subsystem. The information on 
these worksheets facilitates the comparison of the NASA FMEA/CIL 
(Pre and Post 51-L) to the IOA detailed analysis worksheets 
included in Appendix E. Each of these worksheets identifies the 
NASA FMEA being assessed, corresponding MDAC Analysis Worksheet 
ID (Appendix E), hardware item, criticality, redundancy screens, 
and recommendations. For each failure mode, the highest assessed 
hardware and functional criticality is compared and discrepancies 
noted as "N" in the compare row under the column where the 
discrepancy occurred. 


LEGEND FOR IOA ASSESSMENT WORKSHEETS 


Hardware Criticalities: 

1 * Loss of life or vehicle 

2 = Loss of mission or next failure of any redundant item 

(like or unlike) could cause loss of life/vehicle 

3 = All others 

Functional Criticalities: 

1R - Redundant hardware items (like or unlike) all of which, 
if failed, could cause loss of life or vehicle 
2R = Redundant hardware items (like or .unlike) all of which, 
if failed, could cause loss of mission 

Redundancy Screens A, 3 and C: 

P = Passed Screen 
F - Failed Screen 
NA - Not Applicable 

NASA Data : 

Baseline - NASA FMEA/CIL 

New - Baseline with Proposed Post 51-L Changes 

CIL Item : 

X - Included in CIL 
Compare Row : 

N - Non compare for that column (deviation) 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/06/86 
ASSESSMENT ID: DPS-100 

NASA FMEA #: 05-5-B03-2-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

100 

MDM FF1 , FF2 , FF3 , FF4 


LEAD ANALYS T: W. A. Haufler 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 



B 

c 

ITEM 

NASA 

[ 2 /1R ) 

C P 

] 

c 

P 3 

i p ] 

[ x 

IOA 

[ 3 /1R ] 

[ p 

] 

[ 

P 3 

[ p ] 

[ 

COMPARE 

[ N / ] 

[ 

] 

t 

] 

[ 3 

[ N 


RECOMMENDATIONS: (If different from NASA) 

[ 3 /1R ] [ P ) [ P ] [ P ] [ D ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ X ] 
INADEQUATE [ ] 

REMARKS I 

SIMULTANEOUS DISSIMILAR FAILURES WERE EXCLUDED FROM THE IOA, ' 
MULTIPLE FAILURES ARE INCONSISTENT WITH THE NSTS 22206. 

IOA RECOMMENDS REPLACING THIS PHRASE IN THIS NASA/RI FMEA'S 
EFFECTS FIELD "COUPLED WITH AND UNDETECTED FCS FAILURE (IN THE 
NULL POSITION)," WITH "COUPLED WITH A LIKE FAILURE IN ANOTHER 
MDM". IOA DID NOT CONSIDER DEGRADED STATE VECTORS. 

IOA DOES NOT BELIEVE THE LOSS OF TWO STATE VECTORS WILL CAUSE 
LOSS OF CREW OR VEHICLE. IN THE WORST CASE ON ENTRY, THE LOSS OF 
THE SECOND STATE VECTOR WILL PERMIT THE ORBITER TO FLY WITH ONE 
REMAININ G STAT E VECTOR. . . . 

IOA DOES NOT CONCUR WITH NASA'S REEVALUATION AND RATIONALE. 

IOA RECOMMENDS DOWNGRADING HARDWARE CRITICALITY TO 3, THEREBY 
REMOVING THE FMEA FROM THE CIL. 


REPORT DATE 12/01/86 


C-2 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/06/86 
ASSESSMENT ID: DPS-101 

NASA FMEA #: 05-5-B03-2-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

101 

MDM FF1,FF2,FF3,FF4 


LEAD ANALYST: W. A. Haufler 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY SCREENS 
ABC 


NASA [ 2 /1R ] 
IOA [ 3 /1R ] 


[ P ] [ P ] [ P ] 

[ P ] [ P ] [ P ] 


COMPARE 


[ N / 


] 


RECOMMENDATIONS: (If different from NASA) 


i 3 /1R 3 [ P ] [ p ] [ p ] 


CIL 

ITEM 


C X ] * 
[ 3 

C N ] 


[ D ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ X ] 
INADEQUATE [ ] 

REMARKS : 

THIS FAILURE MODE "LOSS OF OUTPUT TO LRU" IS CONSIDERED TO BE 
COVERED BY THIS ROCKWELL FMEA WITH FAILURE MODE "NO OUTPUT: 

FAILED MDM PORT - SCU, MIA, A/D, POWER SUPPLIES, OR I/O 
CARD/CHANNEL FAILURE". 

SIMULTANEOUS DISSIMILAR FAILURES WERE EXCLUDED FROM THE IOA. 
MULTIPLE FAILURES ARE INCONSISTENT WITH THE NSTS 22206. 

IOA RECOMMENDS REPLACING THIS PHRASE IN THIS NASA/RI FMEA'S 
EFFECTS FIELD, "COUPLED WITH AND UNDETECTED FCS FAILURE (IN THE 
NULL POSITION)", WITH "COUPLED WITH A LIKE FAILURE IN ANOTHER 
MDM". IOA DID NOT CONSIDER DEGRADED STATE VECTORS. 

IOA DOES NOT BELIEVE THE LOSS OF TWO STATE VECTORS WILL CAUSE 
LOSS OF CREW OR VEHICLE. IN THE WORST CASE ON ENTRY, THE LOSS OF 
THE SECOND STATE VECTOR WILL PERMIT THE ORBITER TO FLY WITH ONE 
REMAINING STATE VECTOR. 

IOA DOES NOT CONCUR WITH NASA'S REEVALUATION AND RATIONALE. IOA 
RECOMMENDS DOWNGRADING HARDWARE CRITICALITY TO 3, THEREBY 
REMOVING THE FMEA FROM THE CIL. 


REPORT DATE 12/01/86 


C-3 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 


10/06/86 

DPS-102 

05-5-B03-2-2 

DPS 

102 

MDM FF1 , FF2 , FF3 , FF4 
W. A. Haufler 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 






ITEM 


HDW/FUNC 

A 



B 

c 


NASA 

[ 2 /1R ] 

C P 

3 

[ 

P 3 

[ P 3 

[ x ] 

IOA 

[ 3 /1R ) 

[ P 

3 

[ 

P 3 

t P 3 

■ C 3 

COMPARE 

C N / 3 

[ 

3 

( 

3 

[ 3 

[ N 3 


RECOMMENDATIONS: (If different from NASA) 

[ / 3 [ ] t 3 [ ] [ ] 

(ADD/DELETE) 

* CIL RETENTION" RATIONALE: (If applicable) 

ADEQUATE [ X ] 
INADEQUATE [ ] 

REMARKS? 

IOD DID NOT INITIALLY CONSIDER DEGRADED STATE VECTORS. 

IOA DOES CONCUR WITH NASA'S REEVALUATION AND RATIONALE. 

NO DIFFERENCES. 


REPORT DATE 12/01/86 


C-4 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/06/86 

ASSESSMENT ID: DPS-103 

NASA FMEA #: 05-5-B03-2-2 

SUBSYSTEM: DPS 

MDAC ID: 103 

ITEM: MDM FF1,FF2,FF3,FF4 

LEAD ANALYST: W. A. Haufler 

ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 

NASA [ 2 /1R ] [ P ] [ P ] [ P ] 

IOA [ 3 /1R ] [ P ] [ P ] [ P ] 

COMPARE [ N / ] [ ] ' [ ] [ ] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] C ] C ] [ 3 [ ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ X ] 
INADEQUATE [ ] 

REMARKS: 

THIS FAILURE MODE "ERRONEOUS OUTPUT TO LRU" IS CONSIDERED TO BE 
COVERED BY THIS ROCKWELL FMEA WITH FAILURE MODE "ERRONEOUS 
OUTPUT: ADDRESS CHECK FAILURE, DATA ERROR TO MDM MODULE, OR 

MODULE SELECT FAILURE". 

IOA DID NOT INITIALLY CONSIDER DEGRADED STATE VECTORS. 

IOA DOES CONCUR WITH NASA'S REEVALUATION AND RATIONALE. 

NO DIFFERENCES. 


CIL 

ITEM 


[ X ] * 

[ 3 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


REPORT DATE 12/01/86 


C-5 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/06/86 

ASSESSMENT ID: DPS-104 

NASA FMEA #: NONE 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

104 

MDM FF1 , FF2 , FF3 , FF4 


LEAD ANALYST: W. A. Haufler 

ASSESSMENT : 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


" FLIGHT 




" ITEM 


HDW/FUNC 

A 

B 

C 


NASA 

[ / ] 

[ 3 

[ ] 

C ] 

[ 

IOA 

[ 3 /1R ] 

[ P ] 

[ P ] 

[ P 3 

[ 

COMPARE 

[ N /N ] 

- [ M ] 

C N ] 

[ N ) 

c 


RECOMMENDATIONS: (If different from NASA) 

■[/]’[] [ ] [ ] C ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

ROCKWELL/NASA DID NOT COVER THIS FAILURE MODE. 

THIS FAILURE MODE, "PREMATURE OPERATION TO GPC", IS DETERMINED TO 
BE NON-CREDIBLE. • ^ , . 



REPORT DATE 12/01/86 


C-6 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/06/86 
ASSESSMENT ID: DPS-105 

NASA FMEA #: NONE 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

105 

MDM FF1, FF2 , FF3 , FF4 


LEAD ANALYST: W. A. Haufler 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

c 


NASA [ / ] 

[ ] 

C ] • 

[ ] 

C ] 

IOA [ 3 /1R ] 

[ P ] 

[ P ] 

[ p ] 

C 1 

COMPARE [ N /N ] 

[ N ] 

[ N ] 

[ N ] 

[ 3 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [ ] [ ] C ] t ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE , [ ] 

REMARKS ! 

THIS FAILURE MODE "PREMATURE OPERATION TO LRU" IS DETERMINED TO 
BE NON-CREDIBLE. 


REPORT DATE 12/01/86 


C-7 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/06/96 
ASSESSMENT ID: DPS-106 

NASA FMEA #: 05-5-B03-2-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

106 

MDM FF1,FF2,FF3,FF4 


LEAD ANALYST: W. A. Haufler 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 

— 


FLIGHT 






ITEM 

■ — 


HDW/FUNC 

A 

B 



C 



NASA 

[ 2 /1R ] 

CP]- [ 

P 

] 

C 

P 3 

[ X ] *_AW_ 

S 

IOA 

[ 3 71* 3 

CP] C 

P 

3 

[ 

p 3 

[ 3 

5 

COMPARE 

[ N / ] 

t 3 [ 


3 

[ 

3 

[ N ] 










3 

RECOMMENDATIONS: (If 

different 

from 

NASA) 





[ / ] 

[ ] [ 


3 

C 

3 

[ 3 

■ 


(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ X ] 
INADEQUATE [ ] 

REMARKS: 

IOA DID NOT INITIALLY CONSIDER DEGRADED STATE VECTORS. 

IOA DOES CONCUR WITH NASA'S REEVALUATION AND RATIONALE. 

NO DIFFERENCES. 


REPORT DATE 12/01/86 


C-8 


III 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/07/86 

ASSESSMENT ID: DPS-107 

NASA FMEA #: 05-5-B03-2-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

107 

MDM FF1,FF2,FF3,FF4 


LEAD ANALYST: W. A. Haufler 


ASSESSMENT : 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [ 2 /1R ] 

[ P 3 

[ P ] 

[ P ] 

[ x 3 

IOA ( 3 /1R ) 

[ P ) 

[ P ] 

C P .] 

[ 3 

COMPARE [ N / ) 

[ ] 

[ ] 

[ 3 

C N ] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [ ] [ ] C • ] C ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ X ] 
INADEQUATE [ ] 

REMARKS * 

THIS FAILURE MODE "STUCK ON A CONSTANT OUTPUT TO LRU" IS 
CONSIDERED TO BE COVERED BY THIS ROCKWELL FMEA WITH FAILURE MODE 
"ERRONEOUS OUTPUT: ADDRESS CHECK FAILURE, DATA ERROR TO MDM 

MODULE, OR MODULE SELECT FAILURE". 

IOA DID NOT INITIALLY CONSIDER DEGRADED STATE VECTORS. 

IOA DOES CONCUR WITH NASA'S REEVALUATION AND RATIONALE. 

NO DIFFERENCES. 


REPORT DATE 12/01/86 


C-9 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


10/06/8 6 

DPS-108 

05-5-B03-2-1 

DPS 

108 

MDM FF1,FF2,FF3,FF4 
W. A. Haufler 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 



CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 


FLIGHT 






ITEM 


HDW/FUNC 

A 

B 



c 


NASA 

C 2 /1R ] 

[ P ] 

[ P 

3 

[ 

p 3 

[ X ] * 

IOA 

[ 3 /1R ] 

[ P ] 

C P 

3 

t 

P 3 

C 3 

COMPARE 

C N / ] 

[ ] 

[ 

3 

C 

3 

[ N ] 

RECOMMENDATIONS: (If 

different from 

NASA) 




[ 3 /1R ] 

C P ] 

[ p 

3 

[ 

P 3 

[ D ] 








(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If 

applicable) 




ADEQUATE [ X ] 
INADEQUATE [ ] 

REMARKS: 

THIS FAILURE MODE "FALSELY STUCK ON BUSY MODE" IS CONSIDERED TO 
BE COVERED BY THIS ROCKWELL FMEA WITH FAILURE MODE "NO OUTPUT: 
FAILED MDM PORT - SCU, MIA, A/D, POWER SUPPLIES, OR I/O 
CARD/CHANNEL FAILURE". - ^ 

SIMULTANEOUS DISSIMILAR FAILURES WERE EXCLUDED FROM THE IOA. 
MULTIPLE FAILURES ARE INCONSISTENT WITH THE NSTS 22206. 

IOA RECOMMENDS REPLACING THIS PHRASE IN THE NASA/RI FMEA'S 
EFFECTS FIELD, "COUPLED WITH AN UNDETECTED FCS FAILURE (IN THE 
NULL POSITION)", WITH "COUPLED WITH A LIKE FAILURE IN ANOTHER 
MDM". IOA DID NOT CONSIDER DEGRADED STATE VECTORS. 

IOA DOES NOT BELIEVE THE LOSS OF TWO STATE VECTORS WILL CAUSE 
LOSS OF CREW OR VEHICLE. IN THE WORST CASE ON ENTRY, THE LOSS OF 
THE SECOND STATE VECTOR WILL PERMIT THE ORBITER TO FLY WITH ONE 
REMAINING STATE VECTOR. 

IOA DOES NOT CONCUR WITH NASA'S REEVALUATION AND RATIONALE. IOA 
RECOMMENDS DOWNGRADING HARDWARE CRITICALITY TO 3, THEREBY 
REMOVING THE FMEA FROM THE CIL. 


REPORT DATE 12/01/86 


C-10 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/06/86 

ASSESSMENT ID: DPS-120 

NASA FMEA #: 05-5-B03-1-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

120 

MDM FA1 , FA2 , FA3 , FA 4 


LEAD ANALYST: W. A. Haufler 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

. NASA 

[ 2 /1R ] 

C P ] [ 

P 3 

[ P 3 

[ X- ] * 

IOA 

[3/18] 

C P ] [ 

P 3 

[ P 3 

[ 3 

COMPARE 

[ N / ] 

[ 3 [ 

3 

[ 3 

[ N ] 

RECOMMENDATIONS: (If 

different 

from 

NASA) 



[ 3 /1R ] 

t P ] C 

P 3 

[ P 3 

[ D ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ X ] 
v INADEQUATE [ ] 


REMARKS : 

SIMULTANEOUS DISSIMILAR FAILURES WERE EXCLUDED FROM THE IOA. 
MULTIPLE FAILURES ARE INCONSISTENT ' WITH THE NSTS 22206. 

IOA RECOMMENDS REPLACING THIS PHRASE IN THIS NASA/RI FMEA'S 
EFFECTS FIELD, "COUPLED WITH AN UNDETECTED FCS FAILURE (IN THE 
NULL POSITION)", WITH "COUPLED WITH A LIKE FAILURE IN ANOTHER 
MDM". 

IOA DOES NOT CONCUR WITH NASA'S REEVALUATION AND RATIONALE. 

IOA RECOMMENDS DOWNGRADING THE HARDWARE CRITICALITY TO 3, THEREBY 
REMOVING THE FMEA FROM THE CIL. 


REPORT DATE 12/01/86 


C-ll 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 


10/06/86 

DPS-121 

05-5-B03-1-1 

DPS 

121 

MDM FA1 , FA2 , FA3 , FA4 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


LEAD ANALYST: W. A. Haufler 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 


FLIGHT 

HDW/FUNC 

A 

B 



C 

ITEM 

NASA 

C 2 /1R ] 

E P 3 E 

P 

3 

E 

P 3 

[ X ] * 

IOA 

[ 3 /1R ] 

E P ] E 

P 

3 

[ 

p 3 

[ 3 

COMPARE 

[ N / ] 

E ] E 


3 

[ 

] 

[ N ] 

RECOMMENDATIONS: (If 

different 

from 

NASA) 




E 3 /1R ] 

[ P 3 E 

P 

] 

C 

►d 

1 4 

[ D ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ X ] 
INADEQUATE [. ■ ] 

REMARKS: 

THIS FAILURE MODE "NO OUTPUT TO LRU" IS CONSIDERED TO BE COVERED 
BY THE ROCKWELL FMEA WITH FAILURE MODE "NO OUTPUT: FAILED MDM 

PORT - SCU, MIA, A/D, POWER SUPPLIES, OR I/O CARD/ CHANNEL 

failure” . ~ 

SIMULTANEOUS DISSIMILAR FAILURES WERE EXCLUDED FROM THE IOA. 
MULTIPLE F AILURES ARE IN CONSISTENT WITH THE NST S 2220 6. 

IOA RECOMMENDS REPLACING THIS PHRASE IN THIS NASA/RI FMEA'S 
EFFECTS FIELD, "COUPLED WITH AN UNDETECTED FCS FAILURE (IN THE 
NULL POSITION)", WITH "COUPLED WITH A LIKE FAILURE IN ANOTHER 
MDM" . 

IOA DOES NOT CONCUR WITH NASA'S REEVALUATION AND RATIONALE. 

IOA RECOMMENDS DOWNGRADING THE HARDWARE CRITICALITY TO 3, THEREBY 
REMOVING THE FMEA FROM THE CIL. 


REPORT DATE 12/01/86 


C-12 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/06/86 
ASSESSMENT ID: DPS- 12 2 

NASA FMEA #: 05-5-B03-1-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: • 


DPS 

122 

MDM FA1 , FA2 , FA3 , FA4 


LEAD ANALYST: 


W. A. Haufler 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY SCREENS 
ABC 


CIL 

ITEM 


NASA [ 2 /1R ] [ P 3 [ P ] [ P ] 

IOA [ 3 /1R 3 [ P 3 [ P 3 [ P ] 


C X 3 * 
C ] 


COMPARE [ N / 


[ N 3 


RECOMMENDATIONS: (If different from NASA) 

[ / ] C 3 [ 3 C 3 [ 3 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ X ] 
INADEQUATE [ ] 

REMARKS • 

IOA DID* NOT INITIALLY CONSIDER E/T SEP DOORS CLOSING PREMATURELY 
IOA DOES CONCUR WITH NASA'S REEVALUATION AND RATIONALE. 

NO DIFFERENCES. 


REPORT DATE 12/01/86 


C-13 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/06/86 
ASSESSMENT ID: DPS-123 

NASA FMEA #: 05-5-B03-1-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

123 

MDM FA1 , FA2 , FA3 , FA4 


LEAD ANALYST: W. A. Haufler 

ASSESSMENT: 


CRITICALITY REDUNDANCY SC REEN S 

FLIGHT 

HDW/FUNC ABC 


CIL 

ITEM 



NASA [ 2 /1R ] 
IOA [ 3 /1R 3 


[ P ] [ P 3 [ P ] 

[ p ] [ P ] [ P 3 


C x 3 * 
[ 3 


COMPARE [ N / 


[ N ] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] C ] []*[]’ [ ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ X ] 
INADEQUATE [ ] 

REMARKS ; rT \ 

THIS FAILURE MODE ’’ERRONEOUS OUTPUT TO LRU" IS CONSIDERED TO BE 
COVERED BY THIS ROCKWELL FMEA WITH FAILURE MODE "ERRONEOUS 
OUTPUT: ADDRESS JIHECK FAILURE, DATA ERROR TO MDM MODULE, OR 

MODULE SELECT FAILURE". 

IOA DOES CONCUR WITH NASA’S REEVALUATION AND RATIONALE. 

NO DIFFERENCES. 


REPORT DATE 12/01/86 


C-14 


IHII! I 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/06/86 
ASSESSMENT ID: DPS-124 

NASA FMEA #: NONE 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

124 

MDM FA1 , FA2 , FA3 , FA4 


LEAD ANALYST: W. A. Haufler 

ASSESSMENT : 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [ / ] 

C ] 

[ 1 

[ ] 

[ 3 

IOA [ 3 /1R ] 

[ p ] 

[ P ] 

[ P ] 

[ 3 

COMPARE [ N /N ] 

[ N ) 

[ N ] 

[ N ] 

[ 3 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [ ] [ ] [ ] [ ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

v INADEQUATE [ ] 

REMARKS : 

ROCKWELL/NASA DID NOT COVER THIS FAILURE MODE. 

THIS FAILURE MODE, "PREMATURE OPERATION TO GPC", IS DETERMINED TO 
BE NON-CREDIBLE. 


REPORT DATE 12/01/86 


C-15 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/06/86 
ASSESSMENT ID: DPS-125 

NASA FMEA #: NONE 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

125 

MDM FA1,FA2,FA3,FA4 


LEAD ANALYST: 


W. A. Haufler 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 


B 



C 

ITEM 

NASA 

[ / ] 

[ 

3 [ 


3 

[ 

3 

C 3 

IOA 

[ 3 /1R ] 

[ P 

3 [ 

P 

3 

C 

P 3 

C 3 

COMPARE 

[ N /N ] 

[ N 

I 

3 C 

N 

3 

[ 

N ) 

[ 3 

RECOMMENDATIONS.: 

(If different 

from 

NASA) 




l / 3 

C 

3 [ 


3 

[ 

3 

[ 3 


(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ . ] 

REMARKS: 

ROCKWELL/NASA DID NOT COVER THIS FAILURE MODE. 

THIS FAILURE MODE, "PREMATURE OPERATION TO LRU", IS DETERMINED TO 
BE NON-CREDIBLE. 


REPORT DATE 12/01/86 


C-16 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 


10/06/86 

DPS-126 

05-5-B03-1-2 

DPS 

126 

MDM FA1 , FA2 , FA3 , FA4 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


LEAD ANALYST: W. A. Haufler 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 2 /1R ) 

[ P 3 [ 

P 3 

[ P 3 

C x ] * 

IOA 

[ 3 /1R ] 

[ P 3 C 

P 3 

[ p 3 

[ 3 

COMPARE 

[ N / ] 

[ 3 C 

3 

[ 3 

[ N ] 

RECOMMENDATIONS: (If 

different 

from NASA) 



[ / 3 

[ 3 [ 

3 

C 3 

[ 3 





(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ X ] 
INADEQUATE [ ] 

REMARKS l ~ 

IOA DID NOT INITIALLY CONSIDER E/T SEP DOORS CLOSING PREMATURELY. 
IOA DOES CONCUR WITH NASA'S REEVALUATION AND RATIONALE. 

NO DIFFERENCES. 


REPORT DATE 12/01/86 


C-17 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 


10/06/86 
DPS-127 
05-5-B03 -1-2 

DPS 

127 

MDM FA1 , FA2 , FA3 , FA4 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


LEAD ANALYST: W. A. Haufler 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY SCREENS 
ABC 


CIL 

ITEM 


NASA [ 2 /1R ] [ P ] [ P 3 t P 3 

IOA [ 3 /1R 3 C P 3 [ P 3 CP] 


[ X 3 * 

C 3 


COMPARE [ N / 


.3 [ 3 [ N ] 


RECOMMENDATIONS: (If different from NASA) 

[ / 3 C 3 C 3 C 3 t 3 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ X ] 
INADEQUATE [ 3 

REMARKS : " 

THIS FAILURE MODE "STUCK ON A CONSTANT OUTPUT TO LRU" IS 
CONSIDERED TO BE COVERED BY THIS ROCKWELL FMEA WITH FAILURE MODE 
"ERRONEOUS OUTPUT: ADDRESS CHECK FAILURE, DATA ERROR TO MDM 

MODULE, OR MODULE SELECT FAILURE". 

IOA DID NOT INITIALLY CONSIDER E/T SEP DOORS CLOSING PREMATURELY. 
IOA DOES CONCUR WITH NASA'S REEVALUATION AND RATIONALE. 

NO DIFFERENCES. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/06/86 

ASSESSMENT ID: DPS-128 

NASA FMEA #: 05-5-B03-1-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

128 

MDM FA1 , FA2 , FA3 , FA 4 


LEAD ANALYST: W. A. Haufler 


ASSESSMENT: 


_ _ 

CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 






ITEM 


HDW/FUNC 

A 



B 

C 



NASA [ 2 /1R ] 

[ P 

3 

[ 

P ] 

[ P ] 

[ x 

— 

IOA [ 3 /1R ) 

[ P 

3 

[ 

P ] 

[ P ] 

[_ 


COMPARE [ N / 3 

[ 

] 

[ 

] 

[ ] 

[ N 


RECOMMENDATIONS: (If different from NASA) 


[ 3 /1R ] [ P ] [ P ] [ P ] 


[ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ X ] 
INADEQUATE [ ] 

REMARKS : 

THIS FAILURE MODE "FALSELY STUCK ON BUSY MODE" IS CONSIDERED TO 
BE COVERED BY THIS ROCKWELL FMEA WITH FAILURE MODE "NO OUTPUT: 
FAILED MDM PORT-SCU, MIA, A/D, POWER SUPPLIES, OR I/O 
CARD/ CHANNEL FAILURE". 

SIMULTANEOUS DISSIMILAR FAILURES WERE EXCLUDED FROM THE IOA. 
MULTIPLE FAILURES ARE INCONSISTENT WITH THE NSTS 22206. 

IOA RECOMMENDS REPLACING THIS PHRASE IN THIS NASA/RI FMEA'S 
EFFECTS FIELD, "COUPLED WITH AN UNDETECTED FCS FAILURE (IN THE 
NULL POSITION)", WITH "COUPLED WITH A LIKE FAILURE IN ANOTHER 
MDM." 

IOA DOES NOT CONCUR WITH NASA'S REEVALUATION AND RATIONALE. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 


10/06/86 

DPS-140 

05-5-B03-5-1 

DPS 

140 

MDM PF1,PF2 
W. A. Haufler 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 

FLIGHT ITEM 

HDW/FUNC ABC 

NASA [ 2 /1R ] [ P ] [ P ] [ P ] [ X ] * 

IOA [ 3 /1R ] [ P ] [ P ] [ P ] [ ]. 

COMPARE [N/] [] [] [] [N] 


RECOMMENDATIONS: (If different from NASA) 


C / ] [ ] [ ] C 5 ( 1 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 


ADEQUATE [ X ] 
INADEQUATE [ ] 


REMARKS: 

IOA DID NOT INITIALLY CONSIDER LOSS OF PAYLOAD DAY DOORS CLOSE 


COMMAND. 

IOA DOES CONCUR WITH NASA'S REEVALUATION AND RATIONALE. 
NO DIFFERENCES. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT : 


10/06/86 

DPS-141 

05-5-B03-5-1 

DPS 

141 

MDM PF1, PF2 
W. A. Haufler 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA [ 2 /1R ] 

[ P 3 C 

P 3 

[ p ] 

[ x ) * 

IOA [ 3 /1R ] 

[ P 3 [ 

P ] 

[ p ] 

[ ] 

COMPARE [ N / ] 

[ ] [ 

] 

[ ] 

[ N 3 

RECOMMENDATIONS: (If 

different 

from NASA) 


[ / ] 

[ ] [ 

] 

[ ] 

[ ] 



(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ X ] 
INADEQUATE [ ] 

REMARKS: 

THIS FAILURE MODE "LOSS OF OUTPUT TO LRU" IS CONSIDERED TO BE • 
COVERED BY THIS ROCKWELL FMEA WITH FAILURE MODE "NO OUTPUT: 
FAILED MDM PORT-SCU, MIA, A/D, POWER SUPPLIES, OR I/O 
CARD/ CHANNEL FAILURE". 

IOA DID NOT INITIALLY CONSIDER LOSS OF PAYLOAD BAY DOORS CLOSE 
COMMAND. 

IOA DOES CONCUR WITH NASA'S REEVALUATION AND RATIONALE. 

NO DIFFERENCES. 
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ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/06/86 
ASSESSMENT ID: DPS-142 

NASA FMEA #: 05-5-B03-5-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


DPS 

142 

MDM PF1,PF2 
W. A. Haufler 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

c 


NASA 

[ 2 /1R ] 

[ P ] 

[ P 3 

[ P 3 

[ X ] 

IOA 

[ 3 /1R ] 

[ P 3 

[ P 3 

[ P 3 

[ 3 

COMPARE 

C N / ) 

[ 3 

C 3 

C 3 

[ N ] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] t 3 [ ] [ ] E ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ X ] 
INADEQUATE [ ] 

REMARKS: 

IOA DID NOT INITIALLY CONSIDER INADVERTENT COMMAND TO PAYLOAD BAY 
DOOR'S LATCH TO UNLATCH. 

IOA DOES CONCUR WITH NASA'S REEVALUATION AND RATIONALE. 

NO DIFFERENCES. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT : 


10/06/86 

DPS-143 

05-5-B03-5-2 

DPS 

143 

MDM PF1, PF2 
w. A. Haufler 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 2 /1R ] 

[ P 3 

[ P 3 

[ P 3 

C X ] * 

IOA 

[ 3 /1R ] 

C P 3 

• [ P 3 

[ P 3 

t 3 

COMPARE 

[ N / ] 

[ 3 

[ 3 

[ 3 

[ N ] 

RECOMMENDATIONS: (If 

different from 

NASA) 



[ / ] 

[ 3 

[ 3 

. [ 3 

[ 3 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If 

applicable) 



ADEQUATE [ X ] 
INADEQUATE [ ] 

REMARKS • 

THIS FAILURE MODE "ERRONEOUS OUTPUT TO LRU" IS CONSIDERED TO BE 
COVERED BY THIS ROCKWELL FMEA WITH FAILURE MODE "ERRONEOUS 
OUTPUT: ADDRESS CHECK FAILURE, DATA ERROR TO MDM MODULE, OR 

MODULE SELECT FAILURE". 

IOA DID NOT INITIALLY CONSIDER INADVERTENT COMMAND TO PAYLOAD BAY 
DOOR'S LATCH TO UNLATCH. 

IOA DOES CONCUR WITH NASA'S REEVALUATION AND RATIONALE. 

NO DIFFERENCES. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


10/06/86 

DPS-144 

NONE 

DPS 

144 

MDM PF1, PF2 
W. A. Haufler 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ / 3 

[ 3 

[ 3 

C 3 

[ ’ 

IOA 

[ 3 /1R 3 

•t P 3 

C P 3 

C P 3 

[ 

COMPARE 

[N/N ] 

[ N ) 

[ N ] 

[ N ] 

c 


RECOMMENDATIONS: (If different from NASA) 

C / ] [][][] C ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE 

INADEQUATE 


REMARKS: ' 

ROCKWELL/NASA DID NOT COVER THIS FAILURE MODE. 

THIS FAILURE MODE, "PREMATURE OPERATION TO GPC", IS 
BE NON-CREDIBLE. 


[ ] 
[ ] 


DETERMINED TO 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


10/06/86 

DPS-145 

NONE 

DPS 

145 

MDM PF1, PF2 
W. A. Haufler 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [ / ] 

[ 3 

[ 3 

C 3 

[ 3 

IOA [ 3 /1R ] 

[ P 3 

[ P J 

[ P 3 

[ ■ 3 

COMPARE [ N /N ] 

C N ] 

[' N ] 

[ N ] 

C 3 


RECOMMENDATIONS: (If different from NASA) 

C / ] C ] [ ] t ] t , 3 x 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE ■ [ ] 

INADEQUATE [ ] 

REMARKS : 

ROCKWELL/NASA DID NOT COVER THIS FAILURE MODE. 

THIS FAILURE MODE, "PREMATURE OPERATION TO LRU", IS DETERMINED TO 
BE NON-CREDIBLE. 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/06/86 
ASSESSMENT ID: DPS-146 

NASA FMEA #: 05-5-B03-5-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


DPS 

146 

MDM PF1, PF2 
W. A. Haufler 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

C 



ITEM 

NASA 

[ 2 /1R ] 

[ P ] 

[ P ] 

[ P 

] 


[ x 3 

IOA 

[ 3 /1R ] 

C PJ 

[ P ] 

[ P 

] 

* 

C ] 

COMPARE 

[ N / ) 

[- ] 

[ ] 

[ 

] 


[ N ] 


RECOMMENDATIONS : 


(If different from NASA) 


C / 


[ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable). 

• ADEQUATE [X] 
INADEQUATE [ ] 

REMARKS: 

IOA DID NOT INITIALLY CONSIDER INADVERTENT COMMAND TO PAYLOAD BAY 
DOOR'S LATCH TO UNLATCH. 

IOA DOES CONCUR WITH NASA'S REEVALUATION AND RATIONALE. 

NO DIFFERENCES. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT : 


10/06/86 
DPS -14 7 
05-5-B03-5-2 

DPS 

147 

MDM PF1, PF2 
W. A. Haufler 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 

HDW/FUNC 

A 


B 

C 

ITEM 

NASA 

[ 2 /1R ] 

[ P 

3 • .[ 

P ] 

[ P 3 

[ X ] * 

IOA 

[ 3 /1R ] 

[ P 

3 [ 

P ] 

[ P 3 

[ 3 

COMPARE 

[ N / ] 

[ 

3 [ 

3 

[ 3 

C N ] 

RECOMMENDATIONS: (If 

different 

from NASA) 



[ / ] 

[ 

] [ 

3 

[ 3 

[ 3 






(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ X ] 
INADEQUATE [ ) 

REMARKS: 

THIS FAILURE MODE '’STUCK ON A CONSTANT OUTPUT TO LRU" IS 
CONSIDERED TO BE COVERED BY THIS ROCKWELL FMEA WITH FAILURE MODE 
"ERRONEOUS OUTPUT: ADDRESS CHECK FAILURE, DATA ERROR TO MDM 

MODULE, OR MODULE SELECT FAILURE". 

IOA DID NOT INITIALLY CONSIDER INADVERTENT COMMAND TO PAYLOAD BAY 
DOOR’S LATCH TO UNLATCH. 

IOA DOES CONCUR WITH NASA'S REEVALUATION AND RATIONALE. 

NO DIFFERENCES. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 


10/06/86 

DPS-148 

05-5-B03-5-1 

DPS 

148 

MDM PF1,PF2 
W. A. Haufler 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

c 


NASA 

[ 2 /1R ] . 

C P 3 

[ P 1 

C P 3 

C X ] 

IOA 

[ 3 /1R ] 

' [ P ] 

[P] 

C P 3 

[ 3 

COMPARE 

r n / ] 

[ ] 

C ] 

[ 3 

[ N ] 


RECOMMENDATIONS: (If different from NASA) 

C / ] [ ] [ ] E C 3 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ X ] 
INADEQUATE [ ] 

REMARKS: _ 

THIS FAILURE MODE "FALSELY STUCK ON BUSY MODE" IS CONSIDERED TO 
BE COVERED BY THIS ROCKWELL FMEA WITH FAILURE MODE "NO OUTPUT: 
FAILED MDM PORT - SCU, MIA, A/D, POWER SUPPLIES, OR I/O 
CARD/ CHANNEL FAILURE". 

IOA DID NOT COVER THIS FAILURE MODE IN THE ORIGINAL ANALYSIS. 

IOA DOES CONCUR WITH NASA'S REEVALUATION AND RATIONALE. 

A SECOND MDM FAILURE WOULD REQUIRE EVA TO CLOSE PAYLOAD BAY DOORS 
FOR WORST CASE FAILURE MODE. 

NO DIFFERENCES. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 


10/06/86 

DPS-180 

05-5-B03-4-1 

DPS 

180 

MDM LF1, LAI 
W. A. Haufler 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

c 


NASA 

[ 3 /2R ] 

C p ] [ 

NA] 

[ p ] 

C ] * 

IOA 

[ 3 /2R ] 

.[ P 3 [ 

NA] 

[ p ] 

[ 3 

COMPARE 

C / ] 

[ ] C 

] 

[ ] 

[ 3 

RECOMMENDATIONS : 

(If different 

from NASA)' 



[ / ] 

[ ] [ 

] 

[ ] 

[ 3 

/ * nn 


(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NO DIFFERENCES. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/06/86 
ASSESSMENT ID: DPS-181 

NASA FMEA #: 05-5-B03-4-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 


DPS 

181 

MDM LF1,LA1 
W. A. Haufler 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 3 /2R ] 

C P 3 [ 

NA] 

[ P 3 

C 3 * 

IOA 

[ 3 /2R ] 

C P 3 [ 

NA] 

[ P 3 

[ 3 

COMPARE 

[ / ] 

C 3 [ 

3 

C 3 

[ 3 

RECOMMENDATIONS : 

(If different 

from NASA) 



[ / 3 

C 3 [ 

3 

t 3 

C 3 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (if applicable) 

. , ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

THIS FAILURE MODE "LOSS OF OUTPUT TO LRU" IS CONSIDERED TO BE 
COVERED BY THIS ROCKWELL FMEA WITH FAILURE MODE "NO OUTPUT: 
FAILED MDM PORT - SCU, MIA, A/D, POWER SUPPLIES, OR I/O 
CARD/CHANNEL FAILURE". 

NO DIFFERENCES. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/06/8 6 

ASSESSMENT ID: DPS-182 

NASA FMEA #: 05-5-B03-4-2 

SUBSYSTEM: DPS 

MDAC ID: 182 

ITEM: MDM LF1, LAI 

LEAD ANALYST: W. A. Haufler 

ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 

FLIGHT ITEM 

HDW/FUNC ABC 

NASA [ 3 /2R ] [ P ] [ NA] [ P ] [ ] * 

IOA [ 3 /2R ] [ P ] [ NA] [ P ] [ . ] 

COMPARE [ / ] [][][] [ ] 

RECOMMENDATIONS: (If different from NASA) 

[ / ] [][][] c ] 


(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NO DIFFERENCES. 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 


10/06/86 
DPS-183 
05-5-B03 -4 -2 

DPS 

183 

MDM LF1, LAI 
W. A. Haufler 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

c 


NASA 

[ 3 /2R ] 

[ P ] 

[ NA] 

( p ] 

C 

IOA 

[ 3 /2R ] 

[ P 3 

[ NA] 

[ P 3 

C 

COMPARE 

[ / ] 

[ 3 

C ] 

C 3 

[ 

RECOMMENDATIONS : 

(If different from NASA) 



[ / ] 

[ 3 

C 3 

[ 3 

[ 


(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 


REMARKS t~ r-—-—- 

THIS FAILURE MODE "ERRONEOUS OUTPUT TO LRU" IS CONSIDERED TO BE 
COVERED BY THIS ROCKWELL FMEA WITH FAILURE MODE "ERRONEOUS 
OUTPUT: OUTPUT CHANNEL". 

NO DIFFERENCES. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/06/86 
ASSESSMENT ID: DPS-184 

NASA FMEA #: NONE 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

184 

MDM LF1,LA1 


LEAD ANALYST: W. A. Haufler 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [ / ] 

[ 3 

[ 3 

[ 3 

■ C 

IOA [ 3 /2R ] 

[ P 3 

[ NA] 

[ P 3 

[ 

COMPARE [ N /N ] 

[ N ] 

[ N ) 

[ N ] 

[ 


RECOMMENDATIONS: (If different from NASA) 

[ / ] C 3 [ ] [ 3 .[ 3 

(ADD/DELETE) 


*"CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

ROCKWELL/NASA DID NOT COVER THIS FAILURE MODE. 

THIS FAILURE MODE, "PREMATURE OPERATION TO GPC", IS DETERMINED TO 
BE NON-CREDIBLE. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/06/86 
ASSESSMENT ID: DPS-185 

NASA FMEA #: NONE 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

185 

MDM LF1,LA1 


LEAD ANALYST: W. A. Haufler 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 


CIL 

ITEM 


NASA [ / ] 

IOA [ 3 /2R ] 


[3 C 3 E 3 

[ P ] [ NA] t P ] 


C 3 * 
[ 3 


COMPARE [ N /N 


[ N ] [ N ] [ N ] 


3 


RECOMMENDATIONS : 

(If different from 

NASA) 


[ / 3 

[ 3 [3 

[ 3 

t 3 

(ADD/.DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ , ] 

REMARKS: 

ROCKWELL/NASA DID NOT COVER THIS FAILURE MODE. 

THIS FAILURE MODE, "PREMATURE OPERATION TO LRU", IS DETERMINED TO 
BE NON-CREDIBLE. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


10/06/86 

DPS-186 

05-5-B03-4-2 

DPS 

186 

MDM LF1,LA1 
W. A. Haufler 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


CRITICALITY 

REDUNDANCY SCREENS 

FLIGHT 



HDW/FUNC 

A 

B 

NASA [ 3 /2R ] 

C P 3 

[ NA) [ 

IOA [ 3 /2R ] 

[ P 3 

[ NA] [ 


COMPARE 


/ ] [][][] 


CIL 

ITEM 


C 3 * 
C 3 

[ ] 


RECOMMENDATIONS: (If different from NASA) 


[ / 


[ 3 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NO DIFFERENCES. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/06/86 
ASSESSMENT ID: DPS-187 

NASA FMEA #: 05-5-B03-4-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

187 

MDM LF1,LA1 


LEAD ANALYST: W. A. Haufler 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

c 


NASA 

C 3 /2R ] 

C P ] 

[ NA] 

[ p 3 

[ 

IOA 

[ 3 /2R ] 

C P 3 

[ NA] 

[ P 3 

C 

COMPARE 

[ / ] 

C 3 

[ I 

C ] 

C 

RECOMMENDATIONS: (If 

different 

. from 

NASA) 



C / ] 

[ 3 

[ 3 

[ 3 

[ 


(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 01 

ADEQUATE [' ] 

INADEQUATE [ ] 

REMARKS: 

THIS FAILURE MODE "STUCK ON A CONSTANT OUTPUT" IS CONSIDERED TO 
BE COVERED BY THIS ROCKWELL FMEA WITH FAILURE MODE "ERRONEOUS 
OUTPUT: OUTPUT CHANNEL". 

NO DIFFERENCES. 


REPORT DATE 12/01/86 


C-36 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/06/86 
ASSESSMENT ID: DPS-188 

NASA FMEA #: 05-5-B03-4-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 


DPS 

188 

MDM LF1,LA1 
W. A. Haufler 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

c 


NASA [ 3 /2R ] 

[ P ] 

[ NA] 

C P 3 

[ 

IOA [ 3 /2R ] 

[ P 3 

[ NA] 

[ P 3 

C 

COMPARE [ / ] 

[ 3 

[ 3 

[ 3 

[ 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [ ] [ ] C D C 3 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE >[ ] 

REMARKS: 

THIS FAILURE MODE "FALSELY STUCK ON BUSY MODE" IS CONSIDERED TO 
BE COVERED BY THIS ROCKWELL FMEA WITH FAILURE MODE "NO OUTPUT: 
MDM FAILED PORT - SCU, A/D, MIA, POWER SUPPLY, OR I/O CHANNEL". 
NO DIFFERENCES. 


REPORT DATE 12/01/86 


C-37 


APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


10/15/86 

DPS-190 

05-6S-BRES3-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

190 

RESISTOR, CURRENT LIMITING 


LEAD ANALYST: W. A. HAUFLER 

ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA [ 3 /1R ] 

CP] c 

F ] 

[ P 3 

C X ] 

IOA { 3 /1R ] 

[ p 3 C 

F ] 

C P 3 

C 3 

COMPARE [ / ] 

C 3 C 

3 

[ 3 

C N ] 

RECOMMENDATIONS : 

(If different 

from NASA) 


[ / ] 

c i t 

3 

C 3 

c 3 


(ADD/DELETE) 

* CIL RETENTION 'RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ X ] 

REMARKS: 

THE IOA DID NOT COVER THIS ITEM IN THE ORIGINAL ANALYSIS. 

THE IOA DOES CONCUR WITH NASA'S REEVALUATION. 

THE CIL RETENTION RATIONALE IS INADEQUATE BECAUSE IT IS NOT YET 
AVAILABLE. 
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C-38 


APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


10/15/86 

DPS-191 

05-6S-BRPC3-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

191 

CONTROLLER, REMOTE POWER 


LEAD ANALYST: W. A. HAUFLER 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 

FLIGHT ITEM 

HDW/FUNC ABC 

NASA [ 3 /1R ] [P] [ F ] [P] [X]* 

IOA [ 3 /1R ] [ P ] [ F 3 [ P ] [ X -3 

COMPARE [ / 3 [ ] [3 [ 3 [3 


RECOMMENDATIONS: (If different from NASA) 

[ / 3 C 3 [ 3 [ 3 [3 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ 3 

INADEQUATE [ X 3 

REMARKS: 

THE IOA DID NOT COVER THIS ITEM IN THE ORIGINAL ANALYSIS. 

THE IOA DOES CONCUR WITH NASA'S REEVALUATION. 

THE CIL RETENTION RATIONALE IS INADEQUATE BECAUSE IT IS NOT YET 
AVAILABLE. 
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C-39 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA 


10/15/86 

DPS-192 

05-6S-BRPC3-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

192 

CONTROLLER, REMOTE POWER 


LEAD ANALYST: 


W. A. HAUFLER 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 

HDW/FUNC 

A B 

c 

ITEM 

NASA 

[3/3 ] 

[ P ] [ NA] 

[ P 3 

[ 3 * 

IOA 

[3/3 ] 

[ NA] [ NA] 

[ NA] • 

[ 3 

COMPARE 

[ / 3 

C N ] [ ] 

[ N ] 

[ 3 

RECOMMENDATIONS : (If 

different from 

NASA) 



[ / ] 

[3 [ 3 

[ 3 

[ 3 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 


REMARKS: 

THE IOA DID NOT COVER THIS ITEM IN THE ORIGINAL ANALYSIS. 

THE IOA DOES CONCUR WITH NASA'S REEVALUATION. 

ACCORDING TO NSTS 22206, REDUNDANCY SCREENS MUST BE "NA" OR BLANK 
FOR FMEAS WITH A CRITICALITY OF 3/3. 


REPORT DATE 12/01/86 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


10/15/86 

DPS-193 

05-6S-BSW3-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

193 

SWITCH, MDM POWER 


LEAD ANALYST: W. A. HAUFLER 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY SCREENS 
A B C 


NASA [ 3 /1R ] [ P ] [ F ] [ P ] 

IOA [ 3 /1R ] [ P ] [ F ] [ P 3 


COMPARE 


/ 


] 


CIL 

ITEM 


[ X ] * 

[ X ] 

C ] 


RECOMMENDATIONS: (If different from. NASA) 

[ / ] [ 3 [ ] t 


[ 3 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] ' 

N .INADEQUATE [ X ] 

REMARKS: * 

THE IOA DID NOT COVER THIS ITEM IN THE ORIGINAL ANALYSIS. 

THE IOA DOES’ CONCUR WITH NASA'S REEVALUATION. 

THE CIL RETENTION RATIONALE IS INADEQUATE BECAUSE IT IS NOT YET 
AVAILABLE . 


REPORT DATE 12/01/86 


C-41 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/15/86 
ASSESSMENT ID: DPS-194 

NASA FMEA #: 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


05-6S-BSW3-2 

DPS 

194 

SWITCH, MDM POWER 
W. A. HAUFLER 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

c 


NASA 

[3/3 ] 

[ P 3 [ 

NA] 

[ P 3 

[ 3 

IOA 

[3/3 ] 

[ NA] [ 

NA] 

C NA] 

[ 3 

COMPARE 

[ / ] 

[ N ] [ 

3 

[ N ] 

1 

[ 3 

RECOMMENDATIONS : (If 

different 

from 

NASA) 



[ / ] 

[ 3 [ 

3 

[ ]’ 

[ 3 


(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) ' :VA> - 

ADEQUATE [ ] 

v INADEQUATE [ ] 

RE MARKS : - _ _ _ _ _ 

THE IOA DID NOT COVER THIS ITEM IN T HE ORIGINAL ANALYS IS. 
ACCORDING TO NSTS 22206, REDUNDANCY SCREENS MUST BE "NA" OR BLANK 
FOR FMEAS WITir A CRITICALITY OF 3/3. 

NASA AGREED WITH THE IOA ASSESSMENT RECOMMENDATION. 
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C-42 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/15/86 
ASSESSMENT ID: DPS-195 

NASA FMEA #: 05-6S-BSW5-3 


NASA DATA: 
BASELINE [ 1 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

195 

SWITCH, MDM POWER 


LEAD ANALYST: W. A. HAUFLER 

ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 



B 

c 

ITEM 

NASA 

[ 3 /1R ] 

C P 

3 

[ 

F ] 

[ P 3 

[ x 

IOA 

[ 3 /1R ] 

• [ P 

3 

C 

F 3 

[ P 3 

c 

COMPARE 

[ / 3 

[ 

3 

[ 

3 

[ 3 

[ N 


RECOMMENDATIONS: (If different from NASA) 

C / ] C ] t 3 c 


[ 3 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ X ] f 

REMARKS ! 

THE IOA DID NOT COVER THIS ITEM IN THE ORIGINAL ANALYSIS. 

THE IOA DOES CONCUR WITH NASA'S REEVALUATION. 

THE CIL RETENTION RATIONALE IS INADEQUATE BECAUSE IT IS NOT YET 
AVAILABLE . 
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C-43 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


10/06/86 
DPS-201 
U5-5-B02-1-1 

DPS 

201 „ 
Input/Output Processor (IOP) 

T. B. Cribbs 


NASA DATA: 
BASELINE [ 
NEW [ 


X 3 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

c 


NASA [ 2 /1R ) 

[ P 3 

t P 3 

C P 3 

[X 

IOA [ 3- /1R ] 

[ P 3 

C P 3 

[ p 3 

[ 


COMPARE [ N / 


[ N ] 


RECOMMENDATIONS: (If different from NASA) 


E / 3 E 


E 3 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ X ] 
INADEQUATE [ ] 


REMARKS ; • 

SIMULTANEOUS - DISSIMILAR FAILURES WERE EXCLUDED FROM THE IOA. 

MULTIPLE FAILURES ARE INCONSISTENT WITH THE NSTS 222 06. 

NASA'S FAILURE EFFECTS COUPLED THIS FAILURE WITH AN UNDETECTED 
FLIGHT CONTROL SYSTEM FAILURE. THIS COULD RESULT IN TWO HEALTHY 
PATHS BEING VOTED OUT. THIS COULD POSSIBLY CAUSE LOSS OF 
VEHICLE. 

IOA RECOMMENDS CHANGING THE EFFECTS TO DELETE THE SENTENCE 
••DURING ASCENT/ENTRY, THIS...". 


IOA DOES CONCUR WITH THE REST OF NASA'S REEVALUATION AND 


RATIONALE . 
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C-44 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/06/86 

ASSESSMENT ID: DPS-202 

NASA FMEA #: 05-5-B02-1-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

202 

Input/Output Processor (IOP) 


LEAD ANALYST: T. B. Cribbs 

ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 3 /1R ] 

C P ] 

[ P ] 

C p ] 

[ 

IOA 

C 3 /1R ) 

C P ] 

[ P ] 

C p ] 

[ 

COMPARE 

[ / ] 

[ ] 

[ ] 

[ ] 

C 


RECOMMENDATIONS: (If different from NASA) 

[/]'[] [ ] [ ] [ ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

- REMARKS : 

NO DIFFERENCES IN ANALYSIS RESULTS. ' 
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C-45 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/06/86 
ASSESSMENT ID: DPS-203 

NASA FMEA #: NONE 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

203 

Input/Output Processor (IOP) 


LEAD ANALYST: T. B. Cribbs 

ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ / 3 

[ 3 

C 3 

[ 3 

[ 3 

IOA 

[ 3 /1R ] 

C P 3 

C P 3 

[ P 3 

[ 3 

COMPARE 

t N /N ] 

[ N ] 

[ N ] 

[ N ] 

[ 3 


RECOMMENDATIONS: (If different from NASA) 

t / 3 C ] [ ] [ ] [ ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS : 

NASA/RI DID NOT COVER THIS ' FAILURE MODE OF PREMATURE OPERATION. 
THE FAILURE MODE AND EFFECTS ARE DETERMINED TO BE NON-CREDIBLE. 
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C-46 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/06/86 
ASSESSMENT ID: DPS-204 

NASA FMEA #: 05-5-B02-1-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

204 

Input/Output Processor (IOP) 


LEAD ANALYST: T. B. Cribbs 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

c 


NASA [ 3 /1R ] 

[ P ] 

[ P ] 

[ p ] 

[ 

IOA [ 3 /1R ] 

C P ] 

[ P 3 

[ p ] 

[ 


COMPARE [ / 


] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [ ] [ ] [ ] C ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) ' 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NO DIFFERENCE. FAILURE MODE’S EFFECT COULD HAVE BEEN CONSIDERED 
IN ROCKWELL'S 05-5 -B02-1-2. IOA'S FAILURE MODE ANALYSIS DID NOT 
CHANGE CRITICALITY OF FUNCTION. 


REPORT DATE 12/01/86 


C-47 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/06/86 
ASSESSMENT ID: DPS-205 

NASA FMEA #: 0'5-5-B01-l-l 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

205 

Central Processing Unit (CPU) 


LEAD ANALYST: T. B. Cribbs 


ASSESSMENT: 



* 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

c 


NASA [ 2 /1R ] 

[ P 3 

[ P 3 

. [ p 3 

[ X ] * 

IOA [ 3 /1R ] 

[ P 3 

C P 3 

[ P 3 

[ 3 

COMPARE [ N / ] 

[ 3 

[ 3 

[ 3 

[ N ] 


RECOMMENDATIONS : 


(If different from NASA) 


[ / ] [ ] [ ] [ 


[ 3 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ X J 
INADEQUATE [ ] 


RE MARKS : , . .-V -- --- ■•••• -- ^ . . - — _ 

SIMULTANEOUS DISSIMILAR FAILURES WERE EXCLUDED FROM THE IOA. 
MULTIPLE FAILURES ARE INCONSISTENT WITH THE NSTS 22206. 

NASA CONSIDERED ONE GPC AND ONE FCS FAILURE IN ASSIGNING THEIR 
CRITICALITY FOR THIS FMEA. 

THE IOA RECOMMENDS CHANGING THE EFFECTS TO DELETE THE SENTENCE 
"DURING ASCENT/ENTRY, THIS...". 

IOA DOES CONCUR WITH THE REST OF NASA'S REEVALUATION AND 


RATIONALE. 


REPORT DATE 12/01/86 


C-48 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/06/86 
ASSESSMENT ID: DPS-206 

NASA FMEA #: 05-5-B01-1-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

206 

Central Processing Unit (CPU) 


LEAD ANALYST: T. B. Cribbs 


ASSESSMENT: 


SCREENS 

C 

[ P ] 


CIL 

ITEM 


C ] 


CRITICALITY 

FLIGHT 

HDW/FUNC 

NASA [ 3 /1R ] 

IOA [ 3 /1R ] 

COMPARE [ / ] 


REDUNDANCY 
A B 

[ P ] [ P ] 

[ P 3 C P ] 

[ 3 [ 3 


C P -3 [3 

[ 3 [ 3 


RECOMMENDATIONS: (If different from NASA) 

[/]’[•] [3 C 3 . C 3 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ . 3 

REMARKS : 

NO DIFFERENCES 
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a 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 


LEAD ANALYST: 
ASSESSMENT: 

CRITICALITY 


10/06/86 
DPS-207 
NONE 

DPS 

207 

Central Processing Unit (CPU) 
T. B. Cribbs 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


REDUNDANCY SCREENS 


CIL 



FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

M 

NASA 

[ / 3 

C ] 

• [ 3 

[ ] 

[ 3 * 


IOA 

[ 3 /1R ] 

[ P 3 

C P.3 

[ P 3 

[ 3 

■ 

COMPARE 

[ N /N ] 

[ N ] 

C N ] 

[ N ] 

[ 3 

== 


RECOMMENDATIONS: (If different from NASA) 

t / 3 C ] [ 3 [ ] [ ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS ; 

IOA DOES CONCUR WITH NASA'S REEVALUATION. 

THE IOA DOES NOT RECOMMEND THAT A NEW FMEA BE WRITTEN, SINCE THE 
CRITICALITY OF THIS ITEM WAS NOT INCREASED BY THE FAILURE MODE. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/06/86 

ASSESSMENT ID: DPS-208 

NASA FMEA #: NONE 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

208 

Central Processing Unit (CPU) 


LEAD ANALYST: T. B. Cribbs 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 


CIL 

ITEM 


NASA [ ./ ] 

IOA [ 2 /1R ] 

COMPARE [ N /N ] 


[ ] C ] [ ] 

[ p ] [ p ] [ p ] 

[ N ) - [ N ] [ N ] 


[ ] * 

[ ] 

[ ] 


RECOMMENDATIONS: (If different from NASA) 


[ / ] [][][] C 3 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

THE FAILURE MODE AND EFFECTS ARE ' DETERMINED TO BE NON-CREDIBLE. 
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C-51 



APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


10/06/86 

DPS-209 

NONE 

DPS 

209 

CPU Power Switch 
T. B. Cribbs 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

C / 3 

[ 3 [ 

3 

[ 3 

[ 

IOA 

[3/3 ] 

[ NA] [ 

NA] 

[ NA] 

[ 

COMPARE 

[N/N ] 

C N ] [ 

N ] 

C N ] 

[ 

RECOMMENDATIONS : 

(If different 

from 

NASA) 



[ / 3 

[ 3 [ 

3 

t 3 

c 


(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

THIS FAILURE MODE WOULD REQUIRE A SECOND FAILURE OF THE GPC 
BEFORE THE CRITICALITY OF THE POWER SWITCH COULD BE UPGRADED. 
SECOND FAILURES ARE NOT ANALYZED TO ESTABLISH FUNCTIONAL 
CRITICALITY * 

THIS. FAILURE MODE AND EFFECTS ARE DETERMINED TO BE NON-CREDIBLE. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


10/06/86 

DPS-210 

05-5-B17-1-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

210 

GPC Mode Switch 


LEAD ANALYST: T. B. Cribbs 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 



B 

c 


ITEM 

NASA 

[ 2 /1R ] 

C P 

3 

[ 

P 3 

[ -p 

) 

C x 

IOA 

l 3 /1R ] 

[ P 

3 

[ 

P 3 

[ P 

3 

[ 

COMPARE 

[ N / ] 

[ 

3 

[ 

3 

[ 

3 

[ N 


RECOMMENDATIONS: (If different from NASA) 

[ / 3 [ ) [ ] [ ] C ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ 3 

INADEQUATE [ X ] 

REMARKS:. 

THE IOA DOES NOT RECOMMEND THAT A NEW FMEA BE WRITTEN, SINCE THE 
CRITICALITY OF THIS ITEM WAS NOT INCREASED BY THE FAILURE MODE. 
IOA DOES CONCUR WITH NASA'S REEVALUATION. THE CIL RETENTION 
RATIONALE IS INADEQUATE BECAUSE IT IS NOT YET AVAILABLE. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/06/86 
ASSESSMENT ID: DPS-211 

NASA FMEA #: 05-5-B15-1-3 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

211 

GPC Output Switch 


LEAD ANALYST: T. B. Cribbs 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC A B C 


CIL 

ITEM 


NASA [ 3 /1R ] 
IOA [ 3 /1R ] 


C p ] [.P ] E P ] 

E P 3 E P 3 C P 3 


E 3 * 
C 3 


COMPARE [ / 


3 


RECOMMENDATIONS: (If different from NASA) 

E / 3 E ] E 3 E 3 E3 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: ' : -vi-rr: - . .. 

THIS FAILURE MODE IS CONSIDERED TO BE COVERED BY ROCKWELL’S 05-5 
B15-1-3 WHICH HAS THE SAME CRITICALITY AS THIS FAILURE MODE. 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


DPS-213 

NONE 

DPS 

213 

GPC Power Switch 
T. B. Cribbs 


NASA DATA: 
BASELINE [ ] 

NEW [ ] 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FXJNC 

A 

B 

c 


NASA [ / ] 

[ 3 

[ 3 

C 3 

[ 3 

IOA [ 3 /1R ] 

[ P ] 

[ P 3 

[ P 3 

[ 3 

COMPARE [ N /N 3 

[ N ] 

[ N 3 

[ N ] 

[ 3 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [][][] [ ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ . ] 

INADEQUATE [ ] 

REMARKS: 

NASA/RI DID NOT COVER THIS FAILURE MODE. IOA DOES NOT RECOMMEND 
A FMEA BEING WRITTEN SINCE THE CRITICALITY OF THIS ITEM WAS NOT 
INCREASED BY THE FAILURE MODE. 


REPORT DATE 12/01/86 


C-55 



APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/16/86 
ASSESSMENT ID: DPS-214 

NASA FMEA #: 05-6S-BDMC1-2 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

214 

DRIVER MODULE CONTROLLER 


LEAD ANALYST: B. ROBB 

ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3 ] 

[ p 3 

[ P 3 

[ P 3 

[ 

IOA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

C 

COMPARE 

[ / 3 

[ N ] 

[ N ] 

[ N ] 

[ 


RECOMMENDATIONS: (If different from NASA) 


[ / 


[ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 


ADEQUATE [ ] 

INADEQUATE [ ] 


REMARKS : -- - - - 

IOA DID ? NOT COVER' THIS ITEM IN ORIGINAL ANALYSIS. NO HARMFUL 
EFFECTS TO POWER UP A GPC. ROCKWELL SHOULD DOWNGRADE THE FMEA. 
NASA AGREED WITH THE IOA ASSESSMENT RECOMMENDATION. 

ACCORDING TO NSTS 22206, REDUNDANCY SCREENS MUST BE "NA" OR BLANK 
FOR FMEAS WITH A CRITICALITY OF 3/3. 


REPORT DATE 12/01/86 


C-56 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/16/86 
ASSESSMENT ID: DPS-215 

NASA FMEA #: 05-6S-BDMC1-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

215 

DRIVER MODULE CONTROLLER 


LEAD ANALYST: B. ROBB 

ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY SCREENS 
ABC 


CIL 

ITEM 


NASA [ 3 /1R ] [ P ] [ P 3 [ P 3 

IOA T 3 /1R 3 [ P 3 [ P ] [ P 3 


[ 3 * 

[ 3 


COMPARE [ / 


3 


RECOMMENDATIONS: (If different from NASA) 

[ / 3 ' C 3 [ 3 [ 3 [ 3 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ 3 

INADEQUATE [ 3 

REMARKS: 

NO DIFFERENCES. IOA DID NOT COVER THIS ITEM IN ORIGINAL 
ANALYSIS. THE CRITICALITY OF THE FUNCTION WAS NOT INCREASED BY 
THE FAILURE OF THE HARDWARE ITEM. 




£ 


REPORT DATE 12/01/86 


C-57 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/17/86 
ASSESSMENT ID: DPS-216 

NASA FMEA #: 05-6S-BSW1-2 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

216 

SWITCH, GPC POWER 


LEAD ANALYST: 


B. ROBB 


ASSESSMENT: 


CRITICALITY 

FLIGHT 


REDUNDANCY SCREENS 


CIL 

ITEM 



HDW/FUNC 

A 

B 


c 



NASA 

C 3 

/3 

3 

[ P 3 

[ P 3 

[ 

p 3 

[ 

3 * 

IOA 

[ 3 

/3 

3 

[ NA] 

C na] 

[ 

NA] 

C 

3 

COMPARE 

c 

/ 

3 

C N ] 

[ N 3 

[ 

N 3 

[ 

3 


RECOMMENDATIONS: (If different from NASA) 

C / 3 [ 3 ‘ C 3 [ 3 [ 3 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: , , T “‘ V 

IOA DID NOT COVER THIS FAILURE MODE IN THE ORIGINAL ANALYSIS. 

THE FAILURE MODE OF PREMATURE OPERATION CAUSES NO HARMFUL 
EFFECTS. THE CRITICALITY OF THE ROCKWELL FMEA SHOULD BE 
DOWNGRADED TO A 3/3. 

NASA AGREED WITH THE IOA ASSESSMENT RECOMMENDATION. 

ACCORDING TO NSTS 22206, REDUNDANCY SCREENS MUST BE "NA" OR BLANK 
FOR FMEAS WITH A CRITICALITY OF 3/3. 


REPORT DATE 12/01/86 


C-58 



APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


10/17/86 

DPS-217 

05-6S-BSW1-3 (NEW) 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAjC ID: 
ITEM: 


DPS 

217 

SWITCH, GPC POWER 


LEAD ANALYST: B. ROBB 


ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 2 /1R ] 

C P ] 

C P 3 

[ p 3 

C x 

IOA 

[ 2 /1R ] 

[ P ] 

[ P 3 

[ P 3 

[X 

COMPARE 

C / 3 

[ 3 

[ 3 

[ 3 

[ 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [ 3 C 3 C 3 C 3 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ X ] 

REMARKS: 

NO DIFFERENCES. THIS ITEM WAS PRESENTED AT THE DPS PRE-BOARD AS 
NEW FMEA. IOA DID NOT COVER THE FAILURE MODE IN THE ORIGINAL 
ANALYSIS . 

THE CIL RETENTION RATIONALE IS INADEQUATE BECAUSE IT IS NOT YET 
AVAILABLE. 

IOA AGREES THAT CRITICALITY SHOULD BE SAME AS LOSS OF GPC OUTPUT 
FOR THIS FAILURE MODE. 


REPORT DATE 12/02/86 


BTK c-59 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/20/86 
ASSESSMENT ID: DPS-218 

NASA FMEA #: 05-5-B27-1-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

218 

STATUS LIGHT 


LEAD ANALYST: B. ROBB 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3 ] 

[ P 3 

[ P 3 

[ P 3 

[ 

IOA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ 

COMPARE 

[ / 3 

[ N ] 

[ N ] 

[ N 3 

[ 


RECOMMENDATIONS: (If different from NASA) 

.[ / 3 [ ] C 3 C 1 [ 3 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS : 

NO DIFFERENCES. IOA DID NOT COVER THIS ITEM IN THE ORIGINAL' 
ANALYSIS. 

ACCORDING TO NSTS 22206, REDUNDANCY SCREENS MUST BE "NA" OR BLANK 
FOR FMEAS WITH A CRITICALITY OF 3/3. 


REPORT DATE 12/01/86 


C-60 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 


10 / 20/86 

DPS-219 

05-5-B27-2-1 

DPS 

219 

CICTJ 

B. ROBB 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

FLIGHT 



HDW/FUNC 

A 

B 

NASA [3/3 ] 

[ P 3 

■[P] c 

IOA [3/3 ] 

[ NA] 

[ NA] [ 


CIL 

ITEM 


[ ] * 

[ ] 


COMPARE [ / 


[ N ] [ N ] [ N ] 


] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [][][] [3 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NO DIFFERENCES. IOA DID NOT COVER THIS ITEM IN ORIGINAL 
ANALYSIS. 

ACCORDING TO NSTS 22206, REDUNDANCY SCREENS MUST BE "NA" OR BLANK 
FOR FMEAS WITH A CRITICALITY OF 3/3. 


REPORT DATE 12/01/86 


C-61 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 


10 / 20/86 

DPS-220 

05-5-B16-1-1 

DPS 

220 

SWITCH, IPL 
B. ROBB 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

c 


NASA [ 3 /2R ] 

•[ P ] 

CP ] 

“C P 3 

C 

IOA [ 3 /2R ] 

[ P ] 

[ p ] 

C P ] 

[ 

COMPARE [ / ] 

t ■ ] 

[ ] 

[ 3 

C 


RECOMMENDATIONS : 


(If different from NASA) 


t / ] [][]'[] [ 3 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NO DIFFERENCES. IOA DID NOT COVER THIS ITEM IN THE ORIGINAL 
ANALYSIS. 


REPORT DATE 12/01/86 


C-62 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/20/86 

ASSESSMENT ID: DPS-221 

NASA FMEA #: 05-5-B18-1-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

221 

INDICATOR, IPL 


LEAD ANALYST: B. ROBB 


ASSESSMENT : 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

c 


NASA 

[3/3 ] 

[ P 3 [ 

P 3 

[ P 3 

[• 3 * 

IOA 

[3/3 ] 

[ NA] [ 

NA] 

{ NA] 

[ 3 

COMPARE 

[ / ] 

[ N ] [ 

N ] 

[ N ] 

[ 3 

RECOMMENDATIONS: (If 

different 

from 

NASA) 



[ / 3 

[ 3 C 

3 

[ 3 

[ 3 


(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS : 

NO DIFFERENCES. IOA DID NOT COVER THIS ITEM IN THE ORIGINAL 
ANALYSIS. 

ACCORDING TO NSTS 22206, REDUNDANCY SCREENS MUST BE "NA" OR BLANK 
FOR FMEAS WITH A CRITICALITY OF 3/3. 


REPORT DATE 12/01/86 


C-63 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/20/86 
ASSESSMENT ID: DPS-222 

NASA FMEA #: 05-5-B18-1-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


DPS 

222 

INDICATOR, I PL 
B. ROBB 


CRITICALITY 

FLIGHT 


REDUNDANCY SCREENS 


CIL 

ITEM 



HDW/FUNC 

A 

B 

C 




NASA 

[ 3 

/3 

] 

[ P 3 

[ P 3 

[ P 

3 

[ 

3 * 

IOA 

C 3 

/3 

] 

[ NA] 

C NA] 

[ NA] 

C 

3 

COMPARE 

[ 

/ 

3 

[ N ] 

[ N ] 

[ N 

3 

C 

3 


RECOMMENDATIONS: (If different from NASA) 

C / ] []['][] t ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS l 

NO DIFFERENCES. IOA DID NOT COVER THIS ITEM IN THE ORIGINAL 
ANALYSIS. 

ACCORDING TO NSTS 22206, REDUNDANCY SCREENS MUST BE "NA" OR BLANK 
FOR FMEAS WITH A CRITICALITY OF 3/3. 


REPORT DATE 12/01/86 


C-64 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/20/86 

ASSESSMENT ID: DPS-223 

NASA FMEA #: 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


05-5-B19-1-1 

DPS 

223 

INDICATOR OUTPUT, BARBER POLE 
B. ROBB 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

C 


NASA 

[3/3 ] 

[ P ] C 

P 3 

[ P 3 

[ 3 

IOA 

[3/3 ] 

[ NA] [ 

NA] 

[ NA] 

[ 3 

COMPARE 

[ ' / ] 

[ N ] [ 

N ] 

[ N ] 

[ 3 

RECOMMENDATIONS: (If 

different 

from 

NASA) 



[ / ] 

[ ] [ 

3 

[ 3 

[ 3 


(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NO DIFFERENCES. IOA DID NOT COVER THIS ITEM IN THE ORIGINAL 
ANALYSIS . 

ACCORDING TO NSTS 22206, REDUNDANCY SCREENS MUST BE "NA" OR BLANK 
FOR FMEAS WITH A CRITICALITY OF 3/3. 


REPORT DATE 12/01/86 


C-65 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/20/86 
ASSESSMENT ID: DPS-224 

NASA FMEA #: 05-5-B19-1-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

224 

INDICATOR OUTPUT, BARBER POLE 


LEAD ANALYST: B. ROBB 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

FLIGHT 




HDW/FUNC 

A 

B 

c 

NASA [3/3 ] 

[ P 3 

[ P 3 

[ P 3 

IOA [3/3 ] 

[ NA] 

[ NA3 

[ NA3 

COMPARE [ / ] 

[ N 3 

C N 3 

[ N 3 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [)[][] 


CIL 

ITEM 


[ 3 * 

[ ] 

[ 3 


[ 3 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS : 

NO DIFFERENCES. IOA DID NOT COVER THIS ITEM IN THE ORIGINAL 
ANALYSIS . 

ACCORDING TO NSTS 22206, REDUNDANCY SCREENS MUST BE "NA" OR BLANK 
FOR FMEAS WITH A CRITICALITY OF 3/3. 


REPORT DATE 12/01/86 


C-66 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/27/86 
ASSESSMENT ID: DPS-225 

NASA FMEA #: 05-5-B02-1-3 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

225 

INPUT/OUTPUT PROCESSOR (IOP) 


LEAD ANALYST: B. ROBB 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [ 2 /1R ] 

[ P ] 

[ P ] 

[ P ] 

( x 

IOA [ 2 /1R ] 

[ P ] 

[ P ] 

[ P ] 

[ x 

COMPARE [ / ] 

[ ] 

[ ] 

[ 3 

[ 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [ ] [ ] C ] E ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ X ] 
INADEQUATE [ - ] 

REMARKS: 

NO DIFFERENCES. IOA DID NOT COVER THIS FAILURE MODE IN ORIGINAL 
ANALYSIS. 


REPORT DATE 12/01/86 


C-67 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


10/30/86 

DPS-226 

05-6S-BRES1-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

226 

RESISTOR 


LEAD ANALYST: H J LOWERY 

ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 




ITEM 


HBW/FUNC 

A 

B 

c 


NASA 

( /NA ] 

[ NA) 

[ NA] 

C NA] 

[ 3 

IOA 

[ /NA ] 

[ NA] 

C NA] 

[ NA] 

[ 3 

COMPARE 

[ / 3 

[ 3 

i 3 

[ 3 

[ 3 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [ ] t ] [ 3 [ 3 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

FMEA HAS BEEN DELETED BECAUSE RESISTOR HAS BEEN REPLACED WITH A 
FUSE. 

IOA DID NOT COVER THIS FAILURE MODE IN THE ORIGINAL ANALYSIS. 


REPORT DATE 12/01/86 


C-68 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


10/30/86 

DPS-227 

05-6S-BFUS1-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: DPS 

MDAC ID: 227 

ITEM: FUSE 


LEAD ANALYST: H J LOWERY 

ASSESSMENT : 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

c 


NASA 

[ 3 /1R ] 

[ P ] 

[ P 3 

[ p 3 

[ 

„ IOA 

[ 3 /1R ] 

[ P 3 

t P 3 

[ p 3 

[ 

COMPARE 

[ / 3 

[ 3 

[ 3 

[ 3 

[ 


RECOMMENDATIONS : 


(If different from NASA) 


[ / 


[ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 


REMARKS: 

NO DIFFERENCES. IOA DID NOT COVER THIS FAILURE MODE IN THE 
ORIGINAL ANALYSIS. 


REPORT DATE 12/01/86 


C-69 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


10/30/86 

DPS-228 

05-6S-BRPC1-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

228 

CONTROLLER, REMOTE POWER 


LEAD ANALYST: H J LOWERY 

ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

( 3 /1R ] 

[ P 3 

[ P ] 

[ P ] 

C 3 

IOA 

[ 3 /1R ] 

[ P ] 

[ P ] 

[ P 3 

[ 3 

COMPARE 

[ / ] 

t ] 

[ ] 

[ 3 

[ 3 


RECOMMENDATIONS: (If different from NASA) 


[ 


/ 


[ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) • 

ADEQUATE 

INADEQUATE 


REMARKS « 

NO DIFFERENCES. IOA DID NOT COVER THIS FAILURE MODE 
ORIGINAL ANALYSIS. 


[ 

[ 

IN 


] 

] 

THE 


REPORT DATE 12/01/86 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


10/30/86 

DPS-229 

05-6S-BRPC1-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

229 

CONTROLLER, REMOTE POWER 


LEAD ANALYST: H J LOWERY 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3 ] 

[ P 3 

[ P 3 

[ P 3 

c 

IOA 

[3/3 ] 

[ NA) 

[ NA] 

[ NA] 

[ 

COMPARE 

[ / 3 

[ N ] 

[ N ] 

C N ] 

c 


RECOMMENDATIONS: (If different from NASA) 

[ / J [][][] [ 3 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

' INADEQUATE [ ] 

REMARKS : * 

NO DIFFERENCES. IOA DID NOT COVER THIS FAILURE MODE IN THE 
ORIGINAL ANALYSIS. 

ACCORDING TO NSTS 22206/ REDUNDNACY SCREENS MUST BE "NA" OR BLANK 
FOR FMEAS WITH A CRITICALITY OF 3/3. 


REPORT DATE 12/01/86 


C-71 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 11/03/86 

ASSESSMENT ID: DPS-230 

NASA FMEA #: 05-6S-BDIOX-1 (NEW) 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: DPS 

MDAC ID: 230 

ITEM: DIODE 


LEAD ANALYST: H J LOWERY 

ASSESSMENT : 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

C 


NASA 

[ 3 /1R ] 

[ P ] 

C F 3 

[ P 3 

C X 3 

IOA 

[ 3 /1R ) 

[ P ] 

C F ] 

[ P 3 

[ X ] 

4 PARE 

C / ] 

[ ] 

[ 3 

[ 3 

[ 3 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [][][] C ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

' INADEQUATE [ X ] 

REMARKS: ’ 

NO DIFFERENCES. IOA DID NOT COVER THIS FAILURE MODE IN THE 
ORIGINAL ANALYSIS. 

THE CIL RETENTION RATIONALE IS INADEQUATE BECAUSE IT IS NOT YET 
AVAILABLE. 

NASA AGREED WITH THE IOA ASSESSMENT RECOMMENDATION. 
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C-72 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 11/03/86 
ASSESSMENT ID: DPS-231 

NASA FMEA #: 05-5-B15-1-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

231 

SWITCH, NORMAL-TERM BACK-UP 


LEAD ANALYST: H J LOWERY 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 


FLIGHT 





ITEM 


HDW/FUNC 

A 

B 


c 


NASA 

[ 3 /1R ] 

[ P 3 [ 

P 

] 

[ P 3 

[ 

IOA 

[ 3 /1R ] 

[ P 3 [ 

P 

] 

( P 3 

[ 

COMPARE 

[ / ] 

[ ] [ 


3 

[ 3 

[ . 

RECOMMENDATIONS: (If 

different 

from 

NASA) 



[ / 3 

[ ] t 


3 

C 3 

[ 


(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 


REMARKS : “ 

NO DIFFERENCES. IOA DID NOT COVER THIS FAILURE MODE IN THE 
ORIGINAL ANALYSIS. 


REPORT DATE 12/01/86 


C-73 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


10/06/86 

DPS-232 

05-6S-BSW1-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

232 

SWITCH, GPC POWER 


LEAD ANALYST: 


B. ROBB 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY SCREENS 
ABC 


CIL 

ITEM 


NASA [ 3 /1R ] [ P ] [ P ] [ P ] 

IOA [ 3 /1R 3 [ p 3 C p 3 [ P 3 


[ 3 * 

[ 3 


COMPARE [ / 


3 


RECOMMENDATIONS: (If different from NASA) 

C / 3 C 3 ( 3 [ 3 [ 3 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ 3 

INADEQUATE [ 3 

REMARKS • — 

THIS FAILURE OF ONE SET OF CONTACTS ON THE POWER SWITCH HAS THE 
SAME EFFECT AS THE LOSS OF A DRIVER MODULE CONTROLLER. ONE OF 
THREE REDUNDANT POWER SOURCES IS LOST. 

NO DIFFERENCES. IOA DID NOT COVER THIS FAILURE MODE IN THE 
ORIGINAL ANALYSIS. 


REPORT DATE 12/01/86 


C-74 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/07/86 
ASSESSMENT ID: DPS-300 

NASA FMEA #: 05-5-B22-1-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

300 

KEYBOARD SWITCH 


LEAD ANALYST: H J LOWERY 


ASSESSMENT : 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 



C 

ITEM 

NASA 

[ 2 /1R ] 

[ P 3 [ 

P 

] 

[ 

P ] 

C x ] * 

IOA 

[ 3 /1R ] 

[ P ] [ 

P 

3 

[ 

p 3 

[ 3 

COMPARE 

[ N / ] 

C ] [ 


] 

[ 

] 

[ N ] 

RECOMMENDATIONS : 

(If different 

from 

NASA) 




[ / 3 

[ ] [ 


] 

C 

] 

[ 3 

(ADD/ DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ X ] 
INADEQUATE [ ] 

REMARKS : 

REDUNDANT HARDWARE WOULD NOT BE ACCESSIBLE DURING LIFTOFF AND 
DEORBIT. KEYBOARD COMMAND CAPABILITY WOULD BE INHIBITED. THE 
SECOND RELATED FAILURE WOULD RESULT IN LOSS OF LIFE/VEHICLE. 
IOA DOES CONCUR WITH NASA'S REEVALUATION AND RATIONALE. 


REPORT DATE 12/01/86 


C-75 



APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/14/86 
ASSESSMENT ID: DPS-300A 

NASA FMEA #: 05-5-B24-1-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


DPS 

300 

KEYBOARD SWITCH 
H J LOWERY 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

c 


NASA 

[ 3 /2R ] 

[ P ] 

[ P 3 

C P 3 

[ 

IOA 

[ 3 /1R ] 

[ P 3 

[ P 3 

[ P 3 

[ 

COMPARE 

[ /N ] 

[ 3 

[ 3 

C 3 

[ 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [ ] [ ] [ ] [ ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS; 

NO DIFFERENCES. THIS FAILURE MODE DID NOT UPGRADE THE FUNCTIONAL 
CRITICALITY . 

IOA DOES CONCUR WITH NASA'S REEVALUATION. 


REPORT DATE 12/01/86 


C-76 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/14/86 
ASSESSMENT ID: DPS-300B 

NASA FMEA #: 05-5-B24-1-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

300 

KEYBOARD SWITCH 


LEAD ANALYST: H J LOWERY 

ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 2 /1R ] 

[ P 3 [ 

P ] 

[ p ] 

[ x 

IOA 

[ 3 /1R ] 

[.P 3 [ 

P 3 

[ P 3 

[ 

COMPARE 

C N / ] 

C ] [ 

3 

[ 3 

[ N 

RECOMMENDATIONS : 

(If different 

from NASA) 



[ / ] 

[ ] [ 

3 

[ 3 

[ 


(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ X ] 

REMARKS: 

IOA DOES CONCUR WITH NASA'S REEVALUATION. 

THE CIL RETENTION RATIONALE IS INADEQUATE BECAUSE IT IS NOT YET 
AVAILABLE. THIS FAILURE MODE DID NOT UPGRADE THE FUNCTIONAL 
CRITICALITY. 


M2PORT DATE 12/01/86 


C-77 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


10/08/86 
DPS-301 
05-5-B2 1-1-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

301 

X/Y DEFLECTION AMPLIFIERS 


LEAD ANALYST: H J LOWERY 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

c 


NASA [ 3 /1R ] 

[ P 3 

[ P 3 

[ P 3 

[ 3 

IOA [ 3 /1R ] 

[ P 3 

[ P 3 

[ P 3 

C 3 

COMPARE [ / ] 

[ 3 

[ 3 

[ 3 

C 3 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [][][] C 3 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ 
INADEQUATE [ 


REMARKS : 

CRTS (DUS) ARE ESSENTIAL FOR LIFE OR VEHICLE. 

NASA AGREED WITH THE IOA ASSESSMENT RECOMMENDATION. 
IOA DOES CONCUR WITH NASA'S REEVALUATION. 


3 

3 


REPORT DATE 12/01/86 


C-78 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 8/08/86 
ASSESSMENT ID: DPS-302 

NASA FMEA #: 05-5-B21-1-2 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 


DPS 

302 

VIDEO AMPLIFIER 
H J LOWERY 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

c 



NASA [ 3 /1R ] 

[ P ] 

[ P 1 

[ p ] 

[ 

— 

IOA [ 3 /1R ] 

[ P ] 

[ P 3 

[P] • 

[ 


COMPARE [ / ] 

C ] 

[ 3 

[ 3 

[ 


RECOMMENDATIONS: (If different from NASA) 

( / ] [ ] [ ] [ ] [ ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ .] • 

REMARKS : 

CRTS (DUS) ARE ESSENTIAL FOR LIFE OR VEHICLE. 

NASA AGREED WITH THE IOA ASSESSMENT RECOMMENDATION. 

IOA DOES CONCUR WITH NASA'S REEVALUATION. 


REPORT DATE 12/01/86 


C-79 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 


10/08/86 
DPS-3 03 
05-5-B2 1-1-1 

DPS 

303 

CATHODE -RAY TUBE 
H J LOWERY 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY SCREENS 
ABC 


CIL 

ITEM 


NASA [ 3 /1R ] 
IOA [ 3 /1R ] 


[ P ] [ p ] C P 3 

[ ? ] [ P 3 ' [ P 3 


C 3 * 
C 3 


COMPARE [ / 


3 


RECOMMENDATIONS: (If different from NASA) 

C / 3 [ 3 ( 3 [ 3 C 3 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: '• . . 

CRTS (DUS) ARE ESSENTIAL FOR LIFE OR VEHICLE. 

NASA AGREED WITH THE IOA ASSESSMENT RECOMMENDATION. 

IOA DOES CONCUR WITH NASA'S REEVALUATION. 


REPORT DATE 12/01/86 


C-80 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/08/86 
ASSESSMENT ID: DPS-304 

NASA FMEA #: 05-5-B21-1-2 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

304 

HI AND LOW VOLTAGE POWER SUPPLIES 


LEAD ANALYST: H J LOWERY 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

c 


NASA 

[ 3 /1R ] 

C P 3 

[ P 3 

[ P 3 

[ 3 

IOA 

[ 3 /1R ] 

[ P 3 

[ p 3 

[ p 3 

- [ 3 

9PARE 

[ / 3 

[ 3 

[ 3 

[ 3 

C 3 


RECOMMENDATIONS: (If different from NASA) 

[ / 3 [ 3 [3 [3 [ 3 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

CRTS (DUS) ARE ESSENTIAL FOR LIFE OR VEHICLE. 

NASA AGREED WITH THE IOA ASSESSMENT RECOMMENDATION. 


REPORT DATE 12/01/86 


C-81 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/08/86 
ASSESSMENT ID: DPS-305 

NASA FMEA #: 05-6S-BRPC4-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

305 

RPC 


LEAD ANALYST: H J LOWERY 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY SCREENS 
ABC 


CIL 

ITEM 


NASA [ 3 /1R ] 
IOA [ 3 /1R ] 


[ P 3 [ P ] [ P ] 

[ P ] [ P ] [ P 3 


[ ] * 

[ ] 


COMPARE [ / 


'[ 3 [3 


RECOMMENDATIONS : 


(If different from NASA) 


[ / 


[ 3 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] * 

INADEQUATE [ ] 

REMARKS: : -- 

CRTS (DUS) ARE ESSEN TIAL FOR LIFE OR VEHICLE. ^VERIFICATION IN 
FLIGHT OF REDUNDANT STRINGS WHIC H IS PROVIDED BY MDM MEASUREMENTS 
MAY BE ERRONEOUS SINCE THE STATUS MEASUREMENT DERIVATION IS 
INITIATED BY A REDUNDANT CIRCUIT. 

NASA AGREED WITH THE IOA ASSESSMENT RECOMMENDATION. 


REPORT DATE 12/01/86 


C-82 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/08/86 

ASSESSMENT ID: DPS-306 

NASA FMEA #: 05-5-B23-1-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

306 

MEMORY 


LEAD ANALYST: 


H J LOWERY 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

c 


NASA 

[ 3 /1R ) 

[ p 3 [ 

P 3 

[ p 3 • 

C 

IOA 

C 3- /1R ] 

[ p 3 [ 

P 3 

[ P 3 

C 

COMPARE 

[ / 3 

C 3 [ 

3 

[ 3 

[ 

RECOMMENDATIONS: (If 

different 

from NASA) 



[ / 3 

[ 3 [ 

3 

C 3 

[ 


(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE • [ ] 

INADEQUATE [ ] 

REMARKS : 

NO DIFFERENCES. THIS FAILURE MODE DID NOT UPGRADE THE FUNCTIONAL 
CRITICALITY. 


REPORT DATE 12/01/86 


C-83 



APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/08/86 
ASSESSMENT ID: DPS-307 

NASA FMEA #: 05-5-B23-1-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

307 

KEYBOARD ADAPTER 


LEAD ANALYST: H J LOWERY 


ASSESSMENT : 

CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 


c 

ITEM 

NASA 

[ 3 /1R ] 

[ P 3 

[ P 

•3 . 

C P 3 

C 3 * 

■ IOA 

C 3 /1R 3 

[ P 3 

[ P 

3 

[ P 3 

[ 3 

COMPARE 

[ / 3 

C 3 

[ 

3 

[ 3 

[ 3 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [][][] [3 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS J 

NO DIFFERENCES. THIS FAILURE MODE DID NOT UPGRADE THE FUNCTIONAL 
CRITICALITY . 


REPORT DATE 12/01/86 


C-84 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/14/86 
ASSESSMENT ID: DPS-307A 

NASA FMEA #: 05-5-B23-1-3 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

307 

KEYBOARD ADAPTER 


LEAD ANALYST: H J LOWERY 


ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 



B 


C 

ITEM 

NASA 

[ 2 /1R ] 

C P 

] 

[ 

P 

] 

[ P ] 

[ x 

IOA 

[ 3 /1R_] 

[ P 

] 

[ 

P 

] - 

[ P ] 

[ 

COMPARE 

[ N / ] 

[ 

] 

[ 


] 

[ ] 

[ N 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [ ] [ ] C 


[ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

• ADEQUATE [ X ] 
INADEQUATE [ ] 

REMARKS : 

MULTIPLE FAILURES ARE INCONSISTENT WITH NSTS 22206. SIMULTANEOUS 
DISSIMILAR FAILURES WERE EXCLUDED FROM THE IOA. 

PREMATURE TRANSITION FROM ONE MODE TO ANOTHER MODE WHEN OPS 
KEYBOARD ENTRY IS TO BE CLEARED IS A TWO FAILURE EFFECT SINCE A 
PREVIOUS FAILURE IS REQUIRED TO NECESSITATE CREW INITIATION OF 
OPS MODE RECALL, AS STATED IN NASA FMEA 05-5-B23-1-3. 

IOA DOES CONCUR WITH NASA’S REEVALUATION AND RATIONALE. 


REPORT DATE 12/01/86 


C-85 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/08/86 
ASSESSMENT ID: DPS-308 

NASA FMEA #: 05-5-B23-1-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

308 

SYMBOL GENERATOR 


LEAD ANALYST: H J LOWERY 


ASSESSMENT : 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

c 


NASA [ 3 /1R ] 

C P 3 

E P 3 

[ P 3 

[ 3 * 

IOA. [ 3 /1R ] 

[ P ] - 

[ P 3 

[ P 3 

[ 3 

COMPARE [ / ] 

[ ] 

[ 3 

[ 3 

[ 3 

RECOMMENDATIONS: (If 

different 

from NASA) 


C / ] 

[ ] 

[ 3 

[ 3 

C 3 





(ADD/DELETE) 



• - - 

- 



* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 


REMARKS : 

NO DIFFERENCES. THIS FAILURE MODE DID NOT UPGRADE THE FUNCTIONAL 
CRITICALITY. -- 



REPORT DATE 12/01/86 


C-86. 



APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


10/14/86 

DPS-308A 

05-5-B23-1-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

308 

SYMBOL GENERATOR 


LEAD ANALYST: H J LOWERY 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [ 3. /1R ] 

[ P 3 

[ P ] 

[ P 3 

[ 3 * 

IOA [ 3 /1R ] 

[ P ] 

[ P 1 

[ P 3 

C 3 


COMPARE [ / 


] 


RECOMMENDATIONS: (If different from NASA) • 


[ / ] [ ] C ] C 


[ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

THIS FAILURE ' MODE "NO OUTPUT/ERRONEOUS/ERRATIC OUTPUT" IS 
CONSIDERED TO BE COVERED BY THIS ROCKWELL FMEA WITH FAILURE MODE 
"LOSS OF OUTPUT". 

NO DIFFERENCES. THIS FAILURE MODE DID NOT UPGRADE THE FUNCTIONAL 
CRITICALITY . 


REPORT DATE 12/01/86 


C-87 


APPENDIX G 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/08/86 
ASSESSMENT ID: DPS-309 

NASA FMEA #: 05-5-B23-1-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: DPS 
MDAC ID: 309 
ITEM: MIA 


LEAD ANALYST: H J LOWERY 

ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY SCREENS 
ABC 


CIL 

ITEM 


NASA [ 3 /1R ] 
10 A [ 3 /1R ] 


[ P ] [ p ] c p ] 

[ P ] [ P ] c P ] 


C ] * 

C ] 



COMPARE [ / 

] [ 

] 

[ ] [ ] 

[ 

] 

RECOMMENDATIONS 

: (If different from NASA) 



C / 

] C 

] 

E ] E ] 

[ ] 

(ADD/DELETE) 

* CIL RETENTION 

RATIONALE: 

(If 

applicable) — 

. ’ _ _ ... 



ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NO DIFFERENCES. 


I 



REPORT DATE 12/01/86 


C-88 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/08/86 
ASSESSMENT ID: DPS-310 

NASA FMEA #: 05-5-B23-1-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


DPS 

310 

CONTROL LOGIC 
H J LOWERY 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY SCREENS 
ABC 


CIL 

ITEM 


NASA [ 3 /1R ] 
. IOA [ 3 /1R ] 


[ P ] [ P ] [ P ] 

[ P ] [ P ] [ P ] 


C ] * 

t ]. 


COMPARE [ / 


] 


RECOMMENDATIONS: (If different from NASA) 


C / ] [ ] [ ] C ] [ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NO DIFFERENCES. 


REPORT DATE 12/01/86 


C-89 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/08/86 
ASSESSMENT ID: DPS-311 

NASA FMEA #: 05-5-B23-1-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

311 

POWER SUPPLIES 


LEAD ANALYST: H J LOWERY 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY SCREENS 
ABC 


CIL 

ITEM 


NASA [ 3 /1R ] 
IOA [ 3 /1R ] 


[ P ] [ P ] [ P ] 

[ P ] [ P ] [ P ] 


[ ]• * 

C 3 


COMPARE [ / 


] 


RECOMMENDATIONS: (If different from NASA) 

[ / 3 [][][] [ ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS : 

NO DIFFERENCES. 


REPORT DATE 12/01/86 


C-90 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 


10/08/86 

DPS-312 

05-6S-BRPC5-1 

DPS 

312 

RPC 

H J LOWERY 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 


FLIGHT 






ITEM 


HDW/FUNC 

A 


B 


c 


NASA 

[ 3 /1R ] 

C P 

3 [ 

P 

3 

[ P 3 

[ 3 

IOA 

[ 3 /1R ] 

C P 

3 [ 

P 

.3 

C P 3 

[ 3 

COMPARE 

[ / 3 

[ 

3 [ 


3 

C 3 

[ 3 

RECOMMENDATIONS: (If 

different 

from 

NASA) 



[ / ] [][][] C ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS i 

VERIFICATION IN FLIGHT OF REDUNDANT STRINGS WHICH IS PROVIDED BY 
MDM MEASUREMENTS MAY BE ERRONEOUS SINCE THE STATUS MEASUREMENT 
DERIVATION IS INITIATED BY A REDUNDANT CIRCUIT. 

THIS FAILURE MODE DID NOT UPGRADE THE FUNCTIONAL CRITICALITY. 


REPORT DATE 12/01/86 


C-91 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 


10/14/86 
DPS-3 12A 
05-6S-BDI01-1 

DPS 

312 

RPC 

H J LOWERY 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

c 


NASA 

C 3 /1R ] 

C P ] 

t P 3 

[ P 3 

C 3 * 

IOA 

[ 3 /1R ] 

[ p .] 

[ P 3 

C P 3 

C 3 

COMPARE 

C / ] 

[ ] 

[ 3 

[ 3 

C 3 

RECOMMENDATIONS: (If 

different 

from NASA) 



[ / ] 

[ 3 

[ 3 

[ 3 

[ 3 






(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

THIS NASA FMEA NUMBER WAS COVERED IN THE ORIGINAL IOA ANALYSIS. 
THIS FAILURE MODE "OPEN/CLOSED/PREMATURE OPERATION" IS CONSIDERED 
TO BE COVERED BY THIS ROCKWELL FMEA WITH FAILURE MODE "OPENS". 

IOA DOES CONCUR WITH NASA'S REEVALUATION. THIS FAILURE MODE DID 
NOT UPGRADE THE FUNCTIONAL CRITICALITY. 

VERIFICATION IN FLIGHT OF REDUNDANT STRINGS WHICH IS PROVIDED BY 
MDM MEASUREMENTS MAY BE ERRONEOUS SINCE THE STATUS MEASUREMENT 
DERIVATION IS INITIATED BY A REDUNDANT CIRCUIT. 


REPORT DATE 12/02/86 BTK 


C-92 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 


10/14/86 

DPS-312B 

05-6S-BSW4-1 

DPS 

312 

RPC 

H J LOWERY 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

FLIGHT 




HDW/FUNC 

A 

B 

c 

NASA [ 3 /1R ] 

[ P 3 

•CP] 

C p 3 

IOA [ 3 /1R ] 

C p 3 

[ P 3 

[ p 3 

COMPARE [ / ] 

C 3 

[ 3 

[ 3 


CIL 

ITEM 


C 3 * 
C 3 

C 3 


RECOMMENDATIONS: (If different from NASA) 

[ / 3 C 3 C 3 [3 [3 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS : 

THIS NASA FMEA NUMBER WAS NOT COVERED IN THE ORIGINAL IOA 
ANALYSIS. THIS FAILURE MODE "OPEN/CLOSED/PREMATURE OPERATION" IS 
CONSIDERED TO BE COVERED BY THIS ROCKWELL FMEA WITH FAILURE MODE 
"PREMATURE OPERATION". 

VERIFICATION IN FLIGHT OF REDUNDANT STRINGS WHICH IS PROVIDED BY 
THE MDM MEASUREMENTS MAY BE ERRONEOUS SINCE THE STATUS 
MEASUREMENT DERIVATION IS INITIATED BY A REDUNDANT CIRCUIT. 

IOA DOES CONCUR WITH NASA'S REEVALUATION. THIS FAILURE MODE DID 
NOT UPGRADE THE FUNCTIONAL CRITICALITY. 


REPORT DATE 12/01/86 


C-93 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


10/14/86 

DPS-312C 

05-6S-BFUS2-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: DPS 
MDAC ID: 312 
ITEM: RPC 


LEAD ANALYST: H J LOWERY 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

C 3 /1R ] 

• [ P 3 

C P 3 

C P 3 

C 3 * 

IOA 

[ 3 /1R ] 

C P 3 

C P 3 

[ P 3 

[ J 

COMPARE 

C / 3 

C 3 

C 3 

[ 3 

[ 3 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [][][] [ ] 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] ' 

REMARKS : 

THIS NASA FMEA NUMBER WAS NOT COVERED IN THE ORIGINAL IOA 
ANALYSIS. THIS FAILURE MODE "OPEN/ CLOSED/PREMATURE OPERATION" IS 
CONSIDERED TO BE COVERED BY THIS ROCKWELL FMEA WITH FAILURE MODE 
"PREMATURE OPERAT ION'S - ' — - 

VERIFICATION UT FLIGHT OF REDUNDANT STRINGS WHICH IS PROVIDED BY 
THE MDM MEASUREMENTS MAY BE ERRONEOUS SINCE THE STATUS 
MEASUREMENT DERIVATION IS INITIATED BY A REDUNDANT CIRCUIT. 

IOA DOES CONCUR WITH NASA'S REEVALUATION. THIS FAILURE MODE DID 
NOT UPGRADE THE FUNCTIONAL CRITICALITY. 


REPORT DATE 12/02/86 BTK 


C-94 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 


10/08/86 

DPS-313 

05-5-B25-1-3 

DPS 

313 

LOAD SWITCH 
H J LOWERY 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 





ITEM 


HDW/FUNC 

A 

B 

c 


NASA 

[ 3 /1R 

] 

[ P 3 C 

P 3 

[ P 3 

C 3 * 

IOA 

[ 3 /3 

3 

[ NA] [ 

NA] 

C NA] 

[ 3 

COMPARE 

[ /N 

3 

[ N ] [ 

N ] 

[ N ] 

[ 3 

RECOMMENDATIONS : 

(if 

different 

from 

NASA) 



C / 

3 

[ 3 [ 

3 

[ 3 

C 3 




(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 



ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

DEU'S ARE NOT NORMALLY RELOADED DURING A MISSION. SWITCH IS NOT 
NEEDED. 

IOA DOES CONCUR WITH NASA'S REEVALUATION. 


REPORT DATE 12/01/86 


C-95 



APPENDIX C - 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/08/86 
ASSESSMENT ID: DPS-314 

NASA FMEA #: 05-5-B26-1-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


DPS 

314 

FUNCTION SWITCH 
H J LOWERY 


CRITICALITY REDUNDANCY SCREENS CIL 


* ■ 

FLIGHT 

HDW/FUNC 

A 

B 

c 


ITEM 

NASA 

[ 3 /1R ) 

[ P ] 

C P ] 

[ p 

] 

C 

] * 

IOA 

[ 3 /1R ] 

C P ] 

[ P ] 

[ p 

] 

c 

3 

COMPARE 

C / ] 

[ ] 

C ] 

c 

] 

( 

3 


RECOMMENDATIONS: (If different from NASA) 

C / ] E 3 C 3 C 3 C ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) -IN- 
ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NO DIFFERENCES. THIS FAILURE MODE DID NOT UPGRADE THE FUNCTIONAL 
CRITICALITY . 


REPORT DATE 12/01/86 


C-96 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/14/86 
ASSESSMENT ID: DPS-314A 

NASA FMEA #: 05-5-B26-1-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 


DPS 

314 

FUNCTION SWITCH 
H J LOWERY 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

c 


NASA 

C 3 /1R ] 

C P ] 

C P ] 

[ p ] 

C 

IOA 

[ 3 /1R ] 

C P ] 

C P ] 

[ p ] 

[ 

COMPARE 

C / ] 

[ ] 

[ 1 

[ ] 

c 

RECOMMENDATIONS: (If 

different 

. from NASA) 



[ / ] 

[ ] 

C ] 

[ ] 

c 


(ADD/DELETE) 

* CIL' RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ .] • 

REMARKS : 

NO DIFFERENCES. THIS FAILURE MODE DID NOT UPGRADE THE FUNCTIONAL 
CRITICALITY . 


REPORT DATE 12/01/86 


C-97 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/14/86 
ASSESSMENT ID: DPS-314B 

NASA FMEA #: 05-5-B26-1-3 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

314 

FUNCTION SWITCH 


LEAD ANALYST: H J LOWERY 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 

FLIGHT ITEM 

HDW/FUNC ABC 

NASA [ 3 /1R ] [P] [P] [P] C ]* 

IOA [ 3 /1R ] [ P ] [ P ] [ P ] [ ] 

COMPARE [ / ] [][][] [ ] 


RECOMMENDATIONS: (If different from NASA) 

[/]'[] C3 C 3 [ 3 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS : 

NO DIFFERENCES. THIS FAILURE MODE DID NOT UPGRADE THE FUNCTIONAL 
CRITICALITY . “ . • - - . : 


REPORT DATE 12/01/86 


C-98 


APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/08/86 
ASSESSMENT ID: DPS-315 

NASA FMEA #: 05-5-B14-1-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

315 

DATA BUS COUPLER (DBC) 


LEAD ANALYST: 


H J LOWERY 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

c 


NASA [ 2 /1R ] 

[ P 1 

[ P ] 

[ p ] 

C x ] 

IOA [ 3 /1R ] 

C P ] 

c p r 

[ p ] 

C ] 

COMPARE [ N / ] 

[ ] 

[ ] 

[ ] 

C N ] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [ ] [ ] [ ] Cl 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ X ] 
INADEQUATE [ ] 

REMARKS : 

IOA DOES CONCUR WITH NASA'S REEVALUATION AND RATIONALE. 
REDUNDANT HARDWARE WOULD NOT BE ACCESSIBLE DURING LIFTOFF AND 
DEORBIT. 

IF THE SECOND RELATED FAILURE WAS ASSOCIATED WITH EITHER PRE- 
VALVES OR PURGE DURING RTLS ABORT THIS FAILURE WOULD RESULT IN 
LOSS OF LIFE/VEHICLE. SIMULTANEOUS DISSIMILAR FAILURES WERE 
EXCLUDED FROM THE IOA. 

MULTIPLE FAILURES ARE INCONSISTENT WITH THE NSTS 22206. 


o 


REPORT DATE 12/01/86 


C-99 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 


10/08/86 

DPS-316 

05-5-B13-1-4 

DPS 

316 

DBIA 

H J LOWERY 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 3 /2R ] 

C P ] 

C NA] 

C p ] 

[ 

] 

IOA 

[ 3 /2R ] 

C P ]' 

[ NA] 

C P ] 

C 

3 

COMPARE 

[ / ] 

[ ' ] 

[ ] 

C 3 

C 

3 


RECOMMENDATIONS: (If different from NASA) 

[ / ] C ] C ] [ ] [ ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS i 

NO DIFFERENCES. THIS FAILURE MODE DID NOT UPGRADE THE FUNCTIONAL 
CRITICALITY. 


REPORT DATE 12/01/86 


C-100 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


10/14/86 

DPS-316A 

05-6S-BCKT-2-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: DPS 

MDAC ID: 316 

ITEM: DBIA 


LEAD ANALYST: H J LOWERY 

ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3 ] 

[ P ] 

[ P 1 

[ P ] 

C 1 

IOA 

[ 3 /2R ] 

C P ] 

[ NA] 

[ P ] 

[ ] 

COMPARE 

[ /N ] 

[ ] 

[ N ] 

[ ] 

[ ] 


RECOMMENDATIONS: (If different from NASA) 

C / ] [][][] c ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ •] 

REMARKS s " 

THIS FAILURE MODE "OPEN/ SHORT/ERRONEOUS/ERRATIC OUTPUT" IS 
CONSIDERED TO BE COVERED BY THIS ROCKWELL FMEA WITH FAILURE MODE 
"ALL CREDIBLE MODES". 

THE IOA DOES CONCUR WITH NASA'S REEVALUATION. THIS FAILURE MODE 
DID NOT UPGRADE THE FUNCTIONAL CRITICALITY. 


REPORT DATE 12/01/86 


C-101 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


10/27/8 6 

DPS-317 

05-6S-BRES4-1 

DPS 

317 

RESISTOR 
H J LOWERY 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


NASA 

IOA 

COMPARE 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


[3/3 ] 

C P 3 

[ P 3 

C P 3 

[ 

[3/3 ] 

C NA] 

[ NA] 

[ NA] 

[ 

[ / I , 

[ N ] 

[ N ] 

[ N ] 

[ 


* 


RECOMMENDATIONS: (If different from NASA) 

C / ] [][][] [ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (Inapplicable) 


ADEQUATE [ ] 

INADEQUATE [ ] 


REMARKS i 

THE IOA DID NOT COVER THIS ITEM IN THE ORIGINAL ANALYSIS. 


THE IOA DOES CQNCyR WITH NASA'S REEV ALUAT ION. 4 .,.. ..... 
ACCORDING TO NSTS 22206, REDUNDANCY SCREENS MUST BE "NA" OR 
FOR FMEAS WITH A CRITICALITY OF 3/3. 


BLANK 


REPORT DATE 12/01/86 


C-102 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 


10/14/86 

DPS-318 

05-6S-BRPC4-2 

DPS 

318 

RPC 

H J LOWERY 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[3/3 ] 

[ P 3 

[ P 3 

[ P 3 

C 

IOA 

[3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ 

COMPARE 

[ / ] 

[ N ] 

[ N ] 

[ N ] 

[ 


RECOMMENDATIONS: (If different from NASA) 

C / 3 C ] C ] [ 3 C ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

. INADEQUATE [ J 

REMARKS : 

THIS FAILURE MODE "PREMATURE OPERATION" IS CONSIDERED TO BE 
.COVERED BY THIS ROCKWELL FMEA WITH FAILURE MODE "INADVERTENT 
OUTPUT" . 

NO EFFECT SINCE DU WILL HAVE POWER APPLIED PREMATURELY, BUT 
DISPLAY WILL NOT APPEAR UNTIL THE DEU IS TURNED ON. 

NASA AGREED WITH THE IOA ASSESSMENT RECOMMENDATION. 

THE IOA DID NOT COVER THIS FAILURE MODE IN THE ORIGINAL ANALYSIS. 
ACCORDING TO NSTS 22206, REDUNDANCY SCREENS MUST BE "NA" OR BLANK 
FOR FMEAS WITH A CRITICALITY OF 3/3. 


REPORT DATE 12/01/86 


C-103 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 


10/14/86 

DPS-319 

05-6S-BSW4-2 

DPS 

319 

SWITCH, CRT POWER 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: H J LOWERY 


ASSESSMENT : 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 


CIL 

ITEM 


NASA [3/3 ] 

IOA [3/3 ] 


[ P 3 C P 3 [ P 3 

[ NA] [ NA] [ NA] 


[ • 3 * 

[ 3 


COMPARE [ / 


[ N ] [ N ] [ N 


3 


RECOMMENDATIONS : 


(If different from NASA) 


[ / 


[ 3 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 


REMARKS : 

THIS ^AllSfl^ "MODE "^PREMATURE OPERATION" IS CONSIDERED TO BE 
COVERED THIS ROCKWELL FMEA WITH FAILURE MODE "PREMATURE 
OPERATION" . 

NO EFFECT SINCE DU WILL HAVE POWER APPLIED PREMATURELY, BUT 

DISPLAY WI LL NO T APPEAR U NTIL DEU IS TUR NED ON. 

NASA AGREED WITH THE IOA ASSESSMENT RECOMMENDATION. 


IOA DID NOT COVER THIS FAILURE MODE IN THE ORIGINAL ANALYSIS. 
ACCORDING TO NSTS 222 06, REDUNDANCY SCREENS MUST BE "NA" OR BLANK 
FOR FMEAS WITH A CRITICALITY OF 3/3. 


REPORT DATE 12/01/86 


C-104 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 


10/14/86 

DPS-320 

05-6S-BRPC5-2 

DPS 

320 

RPC 

H J LOWERY 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


ASSESSMENT: 

CIL 
ITEM 


[ ] * 

C • ] 

[ 1 


[ ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS : 

THIS FAILURE MODE "PREMATURE OPERATION" IS CONSIDERED TO BE 
COVERED BY THIS ROCKWELL FMEA WITH FAILURE MODE "INADVERTENT 
OUTPUT" . 

NO EFFECT SINCE DEU WILL HAVE POWER APPLIED PREMATURELY. 

IOA DID NOT COVER THIS FAILURE MODE IN THE ORIGINAL ANALYSIS. 

NASA AGREED WITH THE IOA ASSESSMENT RECOMMENDATION. 

ACCORDING TO NSTS 22206, REDUNDANCY SCREENS MUST BE "NA" OR BLANK 
FOR FMEAS WITH A CRITICALITY OF 3/3. 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 



HDW/FUNC 

A 

B 


c 

NASA 

[ 3 

/3 

] 

[ P ] 

[ P ] 

[ 

P 3 

IOA 

[ 3 

/3 

] 

C NA] 

C NA] 

[ 

NA] 

COMPARE 

c 

/ 

] 

C N ] 

[ N ] 

[ 

N ] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [][][] 


REPORT DATE 12/01/86 


C-105 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 11/03/86 

ASSESSMENT ID: DFS-321 

NASA FMEA #: 05-6S-BDIO1-2 (NEW) 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

321 

DIODE, SUPPRESSOR 


LEAD ANALYST: H J LOWERY 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

c 


NASA [3/3 ] 

[ NA] 

[ na] 

[ NA] 

[ 3 * 

IOA [3/3 ] 

[ NA3 

[ na] 

f 

[ NA] 

• [ ] 

COMPARE [ / 3 

[ ] 

[ ] .. 

[ ] 

[ J 


RECOMMENDATIONS: (If different from NASA) 


[ / ] [ ] C 

] [ ] 

[ 

] . 


(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE 

[ 

3 


INADEQUATE 

[ 

3 

REMARKS: 

IOA DID NOT COVER THIS ITEM IN THE 

ORIGINAL ANALYSIS 

• 


NASA AGREED WITH THE IOA ASSESSMENT 
ACCORDING TO NSTS 22206, REDUNDANCY 

RECOMMENDATION. 
SCREENS MUST BE 

"NA" 

OR BLANK 


FOR FMEAS WITH A CRITICALITY OF 3/3. 


REPORT DATE 12/01/86 


C-106 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 11/10/86 

ASSESSMENT ID: DPS-322 

NASA FMEA #: 05-6S-BSW4-3 (NEW) 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

322 

SWITCH, CRT POWER 


LEAD ANALYST: 


H J LOWERY 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [ 3 /1R ] 

C P ] • 

[ P ] 

[ P ] 

[ 

IOA [ 3 /1R ] 

C P ] 

[ P ] 

C P ] 

[ 

COMPARE [ / ] 

C ] 

[ ] 

[ 1 

c 


RECOMMENDATIONS: (If different from NASA) 

C / ] []'-[] C ] C ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

, INADEQUATE [ ] 

REMARKS I 

REF. 05-6Q-2201-3. NASA-JSC FMEA & CIL REVIEW COMMENTS, 9-11-86. 
IOA DID NOT COVER THIS FAILURE MDOE IN THE ORIGINAL ANALYSIS. 

IOA DOES CONCUR WITH NASA'S REEVALUATION. 


REPORT DATE 12/01/86 


C-107 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


10/10/86 

DPS-400 

05-5-B04-2-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

400 

Tape transport mechanism 


LEAD ANALYST: K. Pietz 


ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

c 

*>'•■■■• ,3 

ITEM 

NASA 

[ 3 /2R ] ■ 

C P ] 

C P 3 

[ p 

3 

C ] 

IOA 

( 3 /2R ] 

[ P 3 

C P 3 

C p 

3 

C ] 

COMPARE 

C . / 3 

[ 3 

[ 3 

C 

3 

[ ] 


RECOMMENDATIONS: (If different from NASA) 

[/]•[] [ 3 C 3 [ 3 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NO DIFFERENCES. 


REPORT DATE 12/01/86 


C-108 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/10/86 
ASSESSMENT ID: DPS-401 

NASA FMEA #: 05-5-B04-2-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

401 

Tape transport mechanism 


LEAD ANALYST: K. Pietz 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

C 3 /2R ] 

C P ] 

C P ] 

[ p ] 

[ 

I0A 

[ 3 /2R ] 

[ P ] 

C P ] 

[ p ] 

[ 

COMPARE 

[ / ] 

[ ] 

C ] 

C ] 

[ 


RECOMMENDATIONS: (If different from NASA) 


[ / ] ['][][] C ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE ( ] 

REMARKS : 

NO DIFFERENCES. 


REPORT DATE 12/01/86 


C-109 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/10/86 
ASSESSMENT ID: DPS-402 

NASA FMEA #: 05-5-BO4-2-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

402 

Read electronics 


LEAD ANALYST: K. Pietz 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

c 


NASA 

[ 3 /2R ] 

C P 3 

C P 3 

[ p 3 

■ . [ 3 

10 A 

1 

[ 3 /2R. ] 

[ P 3 

C P 3 

[ P 3 

C 3 

COMPARE 

[ / 3 

C 3 

[ 3 

C 3 

[ 3 


RECOMMENDATIONS: (If different from NASA) 

C / ] £][][] [3 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS : 

NO DIFFERENCES. 


REPORT DATE 12/01/86 


C-110 


APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/10/86 
ASSESSMENT ID: DPS-403 

NASA FMEA #: 05-5-B04-2-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

403 

Read electronics 


LEAD ANALYST: K. Pietz 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

c 


NASA [ 3 /2R ] 

C P ] 

[ p ] 

[ p ] 

C 

10 A [ 3 /2R ] 

C P ] 

[ p ] 

[ p ] 

c 

COMPARE [ / ] 

C ] 

[ ] 

[ ] 

c 


RECOMMENDATIONS: (If different from NASA) 

C / ] [][][] C ] 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NO DIFFERENCES. 


REPORT DATE 12/01/86 


C-lll 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/10/86 
ASSESSMENT ID: DPS-404 

NASA FMEA #: 05-5-B04-2-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

404 

MIA 


LEAD ANALYST: K. Pietz 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY 

SCREENS 

CIL 


FLIGHT 





ITEM 


HDW/FUNC 

A 

B 


c 


NASA 

[ 3 /2R ] 

[ P ] C 

P 

] 

C p ] 

C 

IOA 

[ 3 /2R ] 

[ P ] [ 

P 

] 

C p ] 

[ 

COMPARE 

c. / ] 

[ ] [ 


] 

[ ] 

c 

RECOMMENDATIONS: (If 

different 

from 

NASA)- 



[ / ] 

C ] C 


] 

[ 3 

c 


(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

no Differences. 


REPORT DATE 12/01/86 


C-112 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 


10/10/86 

DPS-405 

05-5-B04-2-1 

DPS 

405 

MIA 

K. Pietz 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY 

SCREENS 



FLIGHT 






HDW/FUNC 

A 

B 

C 


NASA 

[ 3 /2R ] 

•[ P ] 

[ P 

] C P 

3 

IOA 

C 3 /2R ] 

C P ] 

[ P 

] C p 

3 


CIL 

ITEM 


[ ] * 

[ ] 


COMPARE [ / 


] 


RECOMMENDATIONS: (If different from NASA) 

[ / ] [][][] C 1 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ J 

REMARKS: 

NO DIFFERENCES. 


REPORT DATE 12/01/86 


C-113 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/10/86 
ASSESSMENT ID: DPS-406 

NASA FMEA #: 05-5-B04-2-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

406 

Write electronics 


LEAD ANALYST: K. Pietz 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

C 


NASA [ 3 /-2R ] 

[ p ] c 

P ] 

C P 3 

C 3 * 

IOA [ 3 /2R ] 

C p ] c 

P ] 

C P 3 

C 3 

COMPARE [ / ] 

[ ] [ 

3 

C 3 

[ 3 

RECOMMENDATIONS: (If 

different 

from NASA) . 


C / ] 

C ] [ 

3 

C 3 

[ 3 





(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NO DIFFERENCES. • 


REPORT DATE 12/01/86 


C-114 


APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


10 / 10/86 

DPS-407 

05-5-B04-2-1 

DPS 

407 

RPC 

K. Pietz 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

C 

ITEM 

NASA 

[ 3 /2R ] 

[ p ] c 

P ] 

[ P ] 

[ 

10 A 

[ 3 /2R ] 

[ p ] c 

P ] 

[ P ] 

C 

COMPARE 

C / ] 

[ ] [ 

] 

C ] 

c 

RECOMMENDATIONS : 

(If different 

from NASA) 



[ / ] 

[ ] [ 

] 

[ ] 

[ 


(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NO DIFFERENCES. 


REPORT DATE 12/01/86 


C-115 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


10 / 10/86 

DPS-408 

05-6S-BSW2-1 

DPS 

408 

Switch 
K. Pietz 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

c 


NASA [ 3 /2R ] 

[ P 3 

[ P 3 

[ P 3 

[ 

IOA [ 3 /2R ] 

[ P 3 

[ P 3 

C P 3 

c 

COMPARE [ / ] 

[ 3 

[ 3 

C 3 

c 


RECOMMENDATIONS: (If different from NASA) 

C / 3 [ 3 C 3 C 3 C 3 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

'' ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS: 

NO DIFFERENCES. 


REPORT DATE 12/01/86 


C-116 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/10/86 NASA DATA: 

ASSESSMENT ID: DPS-409 BASELINE [ ] 

NASA FMEA #: 05-6S-BSW2-2 NEW [ X ] 

SUBSYSTEM: DPS 

MDAC ID: 409 

ITEM: Switch 

LEAD ANALYST: K. PietZ 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 




ITEM 


HDW/FUNC 

A 

B 

C 



NASA [3/3 ] 

[ P ] 

C P ] 

C p ] 

[ 

— 

IOA [3/3 ] 

[ NA] 

[ NA] 

[ NA] 

[ 


COMPARE [ / ] 

[ N ] 

[ N ] 

[ N ] 

[ 


RECOMMENDATIONS: . (If different from NASA) 

[ / ] [ ] C ] [ ] [ ] 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS : 

ACCORDING TO NSTS 22206, REDUNDANCY SCREENS MUST BE "NA" OR BLANK 
FOR FMEAS WITH A CRITICALITY OF 3/3. 

NASA AGREED WITH THE IOA ASSESSMENT RECOMMENDATION. 


REPORT DATE 12/01/86 


C-117 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/14/86 
ASSESSMENT ID: DPS-410 

NASA FMEA #: 05-5-B04-2-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 

ITEM: 

LEAD ANALYST: 


DPS 

410 

Control logic 
K. Pietz 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 

FLIGHT ITEM 

HDW/FUNC A B C 

NASA [ 3 /2R ] [ P ] [ P ] [ P ] C ] * 

IOA [ 3 /2R ] [ P ] [P] [ P ] C ] 

COMPARE [ / 3 [][][] [ ] 


RECOMMENDATIONS: (If different from NASA) 

[ / 3 [][][] C ] 

(ADD/ DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

Adequate [ ] 

INADEQUATE [ ] 

REMARKS : 

NO DIFFERENCES. 


REPORT DATE 12/01/86 


C-118 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/14/86 
ASSESSMENT ID: DPS-411 

NASA FMEA #: 05-5-B04-2-2 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

411 

Control logic 


LEAD ANALYST: K. PietZ 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

IOA 

[ 3 /2R ) 
[ 3 /2R ] 

[ P 3 
[ P 3 

[ P 3 
[ P 3 

1 — 1 1 — 1 
i 1 1 — i 

[ 3 * 

[ 3. 

COMPARE 

[ / ] 

[ 3 

[ 3 

C 3 

I 3 

RECOMMENDATIONS : 

(If different from NASA) 



[ / ] 

[ 3 

r ] 

[ 3 

[ 3 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS : 

NO DIFFERENCES. 


REPORT DATE 12/01/86 


C-119 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/14/86 
ASSESSMENT ID: DPS-412 

NASA FMEA #i 05-5-B04-2-1 


NASA DATA: 
BASELINE [ X } 
NEW [ } 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

412 

Power supply 


LEAD ANALYST: K. Pietz 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 


C 

ITEM 

NASA 

C 3 /2R ] 

[ P ] 

C P ] 

[ 

P ] 

E ] * 

IOA 

E 3 /2R ] 

[ P ] 

C P ] 

c 

P ] 

E ] 

COMPARE 

C / ] 

E ] 

C ] 

c 

] 

[ ] 

RECOMMENDATIONS : 

(If different from 

NASA) 




E / ] 

E 1 

[ ] 

E 

] 

[ 3 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 


REMARKS : 

THIS FAILURE MODE, "FAILS OUT OF TOLERANCE", IS CONSIDERED TO BE 
COVERED BY THIS ROCKWELL FMEA WITH FAILURE MODE, "LOSS OF 
OUTPUT" . 


REPORT DATE 12/01/86 


C-120 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/17/86 

ASSESSMENT ID: DPS-413 

NASA FMEA #: 05-6S-BRES2-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

413 

RESISTOR, CURRENT LIMITER 


LEAD ANALYST: B. ROBB 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 



C 

ITEM 

NASA 

[ 3 /2R ] 

C P ] 

[ P 

] 

c 

P ] 

C 1 * 

IOA 

C 3 /2R ] 

C P 3 

[ P 

] 

[ 

P ] 

[ ] 

COMPARE 

[ / ] 

[ ] 

[ 

] 

c 

] 

[ ] 

RECOMMENDATIONS : 

(If different from 

NASA) 




C / ] 

[ ] 

[ 

] 

[ 

] 

[ ] 

t Ann /m?T tttitm 


(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS : 

NO DIFFERENCES. IOA DID NOT COVER THIS ITEM IN THE ORIGINAL 
ANALYSIS. THE EFFECTS OF THIS FAILED ITEM COULD BE CONSIDERED TO 
BE COVERED BY MDAC ID. 408, A SWITCH WHICH IS IN SERIES WITH THIS 
RESISTOR. 


REPORT DATE 12/01/86 


C-121 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/30/86 NASA DATA: 

ASSESSMENT ID: DFS-414 BASELINE [ X ] 

NASA FMEA #: 05-6S-BRPC2-1 NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

414 

CONTROLLER, REMOTE POWER 


LEAD ANALYST: H J LOWERY 

ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS CIL 

FLIGHT ITEM 

HDW/FUNC ABC 

NASA [ 3 /2R ] [ P ] [ P ] [ P 3 [ ] * 

IOA [ 3 /2R ] [ P ] [ P ] [ P 3 C 3 

COMPARE [ / 3 C 3 C 3 [ 3 C 3 


RECOMMENDATIONS: (If different from NASA). 

C / 3 C 3 C 3 [ 3 [3 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ) 

INADEQUATE [ ] 

REMARKS: 

NO DIFFERENCES. IOA DID NOT COVER THIS' FAILURE IN THE ORIGINAL 
ANALYSIS . 


REPORT DATE 12/01/86 


C-122 


APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/06/86 
ASSESSMENT ID: DPS-415 

NASA FMEA #: 05-5-B2 0-1-1 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

415 

IPL Source Switch 


LEAD ANALYST: T. B. Cribbs 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

CIL 

FLIGHT 




ITEM 

HDW/FUNC 

A 

B 

c 


NASA [2/2 ] 

[ P ] 

C P ] 

C p ] 

C x ] 

IOA [3/3 ] 

. [ NA] 

[ NA] 

[ NA] 

C 3 

COMPARE [ N /N J 

[ N ] 

[ N ] 

[ N ] 

[ N ] 


* 


RECOMMENDATIONS: (If different from NASA) 

C / ] [ ] [ ] C ] [ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE ( X ] 
INADEQUATE [ ] 

REMARKS : 

IOA CRITICALITY ASSIGNMENT WAS MADE BECAUSE AFTER INITIAL PROGRAM 
LOAD IS COMPLETE A SYSTEMS SOFTWARE PROBLEM OF SOME TYPE WOULD 
HAVE TO OCCUR BEFORE ANY ATTEMPT WOULD BE MADE TO RE-IPL A GIVEN 
GPC. 

SIMULTANEOUS DISSIMILAR FAILURES WERE EXCLUDED FROM THE IOA. 
MULTIPLE FAILURES ARE INCONSISTENT WITH NSTS 22206. 

ACCORDING TO NSTS 22206, REDUNDANCY SCREENS MUST BE "NA' OR BLANK 
FOR FMEAS WITH A CRITICALITY OF 3/3. 

IOA DOES CONCUR WITH NASA'S REEVALUATION AND RATIONALE. 


REPORT DATE 12/01/86 


C-123 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 11/10/86 
ASSESSMENT ID: DPS -4 16 

NASA FMEA #: MMU-1 (NEW) 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

416 

CONTROLLER, REMOTE POWER 


LEAD ANALYST: T. B. Cribbs 

ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 


C 

ITEM 

NASA 

[3/3 ] 

[ NA] 

[ NA] 

[ 

NA] 

[ 3 * 

IOA 

[3/3 ] 

[ NA] 

[ NA] 

[ 

NA] 

[ ] 

COMPARE 

. [ / 3 

C ] 

C 3 

[ 

3 

[ 3 

RECOMMENDATIONS : 

(If different from 

NASA) 




[ / ] 

[ 3 

[ 3 

[ 

3 

[ 3 


(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS : 

IOA DID NOT COVER THIS FAILURE MODE IN THE ORIGINAL ANALYSIS. 
ACCORDING TO NSTS 22206, REDUNDANCY SCREENS MUST BE "NA" OR BLANK 
FOR FMEAS WITH A CRITICALITY OF 3/3. 

NASA AGREED WITH THE IOA ASSESSMENT RECOMMENDATION. 


REPORT DATE 12/01/86 


C-124 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 11/10/86 
ASSESSMENT ID: DPS-417 

NASA FMEA #: MMU-2 (NEW) 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

417 

SWITCH, IPL 


LEAD ANALYST: H J LOWERY 


ASSESSMENT: 


CRITICALITY 

REDUNDANCY SCREENS 

FLIGHT 




HDW/FUNC 

A 

B 

c 

NASA [ 3 /2R ] 

[ P ] 

[ P ] 

C P ] 

IOA [ 3 /2R ] 

C P ] 

C P 1 

[ p ] 

COMPARE [ / ] 

[ ] 

C ] 

[ ] 


CIL 

ITEM 


C ] * 

[ ] 

t ] 


RECOMMENDATIONS: (If different from NASA) 

[ / i [][][] [ ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS • 

REF. 05-5-B16-1-1. NASA-JSC FMEA & CIL REVIEW COMMENTS, 9-19-86. 
IOA DID NOT COVER THIS ITEM IN THE ORIGINAL ANALYSIS. 

NASA AGREED WITH THE IOA ASSESSMENT RECOMMENDATION. 


REPORT DATE 12/01/86 


C-125 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


10/14/86 

DPS-501 

05-5-B08-1-1 

DPS 

501 

CIA 

B. ROBB 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 



CRITICALITY 

REDUNDANCY SCREENS 

CIL 


FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

[ 2 /1R ] 

[ P 3 

[ F 3 

C P 3 

[ X ] * 

IOA 

C 3 /1R ] 

[ P 3 

[ P 3 

I P 3 

t 3 

COMPARE 

C N / ] 

[ 3 

C N ] 

[ 3 

[ N ] 


RECOMMENDATIONS: (If different from NASA) 

[ / 3 [][][] [3 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ X ] 


REMARKS: - 

THIS FAILURE MODE, "LOSS OF OUTPUT TO MAIN ENGINE ON ONE 
CHANNEL", COULD BE CONSIDERED TO BE COVERED BY ROCKWELL 05-05- 
B08-1-1 WITH FAILURE MODE, "NO OUTPUT". 

IOA DOES CONCUR WITH NASA'S RE EVALUATION. THE CIL RETENTION 
RATIONALE IS INADEQUATE BECAUSE IT IS NOT YET AVAILABLE. 


REPORT DATE 12/01/86 


C-126 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 

LEAD ANALYST: 
ASSESSMENT: 


10/14/86 

DPS-502 

05-5-B08-1-1 

DPS 

502 

MIA 

B. ROBB 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


CRITICALITY REDUNDANCY SCREENS CIL 



- FLIGHT 
HDW/FUNC 

A 

B 



C 

ITEM 

NASA 

[ 2 /1R ] 

[ p ] c 

F 

] 

[ 

P ] 

C x ] * 

IOA 

[ 3 /1R ] 

[ p ] [ 

P 

] 

[ 

P ] 

. [ ] 

COMPARE 

[ N / ] 

[ ] c 

N 

] 

[ 

] 

( N ] 

RECOMMENDATIONS : 

(If different 

from 

NASA) 




C / ] 

[ 3 C 


] 

[ 

] 

C ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE ( ] 

INADEQUATE [ X ] 

REMARKS : 

IOA DOES CONCUR WITH NASA'S REEVALUATION. THE CIL RETENTION 
RATIONALE IS INADEQUATE BECAUSE IT IS NOT YET AVIALABLE. 


REPORT DATE 12/01/86 


C-127 



APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


10/14/86 

DPS-503 

05-5-B08-1-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

503 

POWER CONTROL SWITCH 


LEAD ANALYST: B. ROBB 


ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 


c 

ITEM 

NASA 

C 2 /1R ] 

C P 3 

[ F ] 

[ 

p 3 

[ 3 

IOA 

[ 3 /1R ] 

C P 3 

[ P 3 

I 

P 3 

[ 3 

COMPARE 

C N / ] 

[ 3 

C N ) • 

[ 

3 

C 3 


RECOMMENDATIONS: (If different from NASA) 

t / ] [][][] C ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) _ __ 

ADEQUATE [ ■ ] 

INADEQUATE [ X ] 

REMARKS ; 

THIS FAILURE MODE, "LOSS OF OUT PUT TO MAIN ENGINE ON ALL COMMAND 
CHANNELS" , I S CONSIDERED TO BE COVERED BY ROCKWELL 0 5 -5 - B 0 8 - 1 - 1 
WITH THIS FAILURE "LOSS OF REDU NDANT POWER SUPPLIES". 

IOA DOES CONCUR WITH NASA'S REEVALUATION. THE CIL RETENTION 
RATIONALE IS INADEQUATE BECAUSE IT IS NOT YET AVIALBLE. 


REPORT DATE 12/01/86 


C-128 


APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 10/14/86 
ASSESSMENT ID: DPS-504 

NASA FMEA #: 05-5-B08-1-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

504 

INTERNAL POWER SUPPLIES 


LEAD ANALYST: B. ROBB 

ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 

c 

ITEM 

NASA 

C 2 /1R 3 

C P 3 

[ F 3 

[ P 3 

[ x ] * 

IOA 

C 3 /l'R ] 

C P 3 

[ P 3 

C P 3 

[ 3 

COMPARE 

C X / 3 

[ 3 

[ N ] 

[ 3 

C. N ] 


RECOMMENDATIONS: (If different from NASA) 

[ / 3 [][][] [ 3 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE . [ X ] 

REMARKS: 

THIS FAILURE MODE, "LOSS OF OUTPUT TO MAIN ENGINE ON ALL COMMAND 
CHANNELS”, IS . CONSIDERED TO BE COVERED BY ROCKWELL 05-5-B08-1-1, 
WITH THIS FAILURE "LOSS OF REDUNDANT POWER SUPPLIES". 

IOA DOES CONCUR WITH NASA'S REEVALUATION. 

THE CIL RETENTION RATIONALE IS INADEQUATE BECAUSE IT IS NOT YET 
AVAILABLE . 


REPORT DATE 12/01/86 


C-129 



APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


10/14/86 

DPS-505 

05-5-B08-1-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

505 

CONTROLLER INTERFACE ADAPTER 


LEAD ANALYST: B. ROBB 


ASSESSMENT: 


CRITICALITY REDUNDANCY SCREENS 

FLIGHT 

HDW/FUNC ABC 


CIL 

ITEM 


NASA [ 2 /1R ] 
IOA [ 3 /1R ] 


[ P ] [ F ] [ P ] 

CP] C P ] C P ] 


C X ] * 
C ] 


COMPARE [ N / 


C N ] [ ] [ N ] 


RECOMMENDATIONS: (If different from NASA) 


[ / 


[ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ X ] 

REMARKS : 

THIS FAILURE MODE, "LOSS OF OUTPUT ON STATUS OF ENGINES 1 ', IS 
CONSIDERED TO BE COVERED BY ROCKWELL 05-5-B08-1-1, WITH THIS 
FAILURE MODE "NO OUTPUT". 

IOA DOES CONCUR WITH NASA'S REEVALUATION. 

THE CIL RETENTION RATIONALE IS INADEQUATE BECAUSE IT IS NOT YET 
AVAILABLE . 


REPORT DATE 12/01/86 


C-130 


APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 


10/14/86 

DPS-506 

05-5-B08-1-1 

DPS 

506 

OIE 


NASA DATA: 
BASELINE [ X ] 
NEW [ ] 


LEAD ANALYST: B. ROBB 

ASSESSMENT: 

CRITICALITY REDUNDANCY SCREENS CIL 



FLIGHT 

HDW/FUNC 

A 

B 


C 

ITEM 

NASA 

[ 2 /1R ] 

C P ] 

C F ] 

[ 

P ] 

[ ] * 

IOA 

[3/3 ] 

[ NA] 

[ nai 

[ 

NA] 

[ ] 

COMPARE 

[ N /N ] 

[ N ] 

[ N ] 

[ 

N ] 

[ ] 

RECOMMENDATIONS : 

(If different from 

NASA) 




[ / ] 

[ ] 

[ 3 

[ 

] 

[ ] 

(ADD/DELETE) 


* CIL RETENTION RATIONALE: (If applicable) 

. ADEQUATE [ ] 

INADEQUATE [ ] 

REMARKS ! 

NASA/RI DID NOT SPECIFICALLY COVER THIS FAILURE MODE, "LOSS OF 
OUTPUT TO S-BAND, MAINTENANCE RECORDS, AND LPS T-0 UMBILICAL". 
THIS FAILURE MODE IS CONSIDERED TO BE COVERED BY ROCKWELL FMEA 
05-5-B08-1-1, WITH FAILURE MODE "NO OUTPUT". 


REPORT DATE 12/01/86 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 


10/16/86 

DPS-507 

05-6S-BCKT1-1 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: 
MDAC ID: 
ITEM: 


DPS 

507 

CIRCUIT, EIU POWER 


LEAD ANALYST: 


B. ROBB 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY SCREENS 
A B C 


CIL 

ITEM 


NASA [ 2 /1R ] 
IOA [ 2 /1R ] 


[ P ] [ F ] [ P ] 

[PI [ F ] [ P 3 


[ X ] * 
[ X ] 


COMPARE [ / 


] 


RECOMMENDATIONS: (If different from NASA) 

[ / 3 [ ] C 3 [ 3 C3 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable)' 

ADEQUATE [ ] 

INADEQUATE [ X ] 

REMARKS : 

NO DIFFERENCES. IOA DID NOT COVER THIS ITEM IN ORIGINAL 
ANALYSIS. IOA DOES CONCUR WITH THE NASA REEVALUATION. 

THE CIL RETENTION RATIONALE IS INADEQUATE BECAUSE IT IS NOT YET 
AVAILABLE . 


REPORT DATE 12/01/86 
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APPENDIX C 
ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 11/03/86 
ASSESSMENT ID: DPS-508 

NASA FMEA #: EIU-1 (NEW) 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


SUBSYSTEM: DPS 
MDAC ID: 508 
ITEM: EIU 


LEAD ANALYST: H J LOWERY 


ASSESSMENT: 



CRITICALITY 

REDUNDANCY 

SCREENS 



FLIGHT 






HDW/FUNC 

A 

B 

C 


NASA 

[1/1 ] 

[ P ] 

[ F 

] [• P 

] 

IOA 

C 1 /l ] 

[ P ] 

[ F 

] [ P 

] 


COMPARE [ / 


C- ] C ] 


CIL 

ITEM 


C X ] * 
[ X ] 

[ ]' 


RECOMMENDATIONS: (If different from NASA) 

[ / ] C ] [ ] Cl C ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

INADEQUATE [ X ] 

REMARKS: 

IOA DID NOT COVER THIS FAILURE MODE IN THE ORIGINAL ANALYSIS. 
NASA AGREED WITH THE IOA ASSESSMENT RECOMMENDATION. 

THE RETENTION RATIONALE IS INADEQUATE BECAUSE IT IS NOT YET 
AVAILABLE. THIS IS A NEW FMEA PRESENTED AT THE DPS PREBOARD. 


REPORT DATE 12/01/86 
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APPENDIX C 

ASSESSMENT WORKSHEET 


ASSESSMENT DATE: 
ASSESSMENT ID: 
NASA FMEA #: 

SUBSYSTEM: 

MDAC ID: 

ITEM: 


11/03/86 
DPS-509 
EIU-2 (NEW) 

DPS 

509 

SWITCH, POWER 


NASA DATA: 
BASELINE [ ] 

NEW [ X ] 


LEAD ANALYST: H J LOWERY 


ASSESSMENT: 


CRITICALITY 

FLIGHT 

HDW/FUNC 


REDUNDANCY SCREENS 
ABC 


CIL 

ITEM 


NASA [1/1 ] 

IOA [1/1 ] 


[ P ] [• F ] [ P ] 

[ P ] [ F ] [ P ] 


[ X ] * 
[ X ] 


COMPARE [ / 


] 


RECOMMENDATIONS : 


(If different from NASA) 


[ / ] [][][] [ ] 

(ADD/DELETE) 

* CIL RETENTION RATIONALE: (If applicable) 

ADEQUATE [ ] 

, INADEQUATE [ X ] 

REMARKS: 

IOA DID NOT COVER THIS FAILURE MODE IN THE ORIGINAL ANALYSIS. 
NASA AGREED WITH THE IOA ASSESSMENT RECOMMENDATION. 

THE CIL RETENTION RATIONALE IS INADEQUATE BECAUSE IT IS NOT YET 
AVAILABLE. THIS IS A NEW FMEA PRESENTED AT THE DPS PREBOARD. 


REPORT DATE 12/01/86 
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APPENDIX D 


CRITICAL ITEMS 


D-l 



APPENDIX D 


CRITICAL ITEMS 


NASA FMEA 

IDA 

ITEM 

FAILURE MODE 1 



ID 

NAME 

i 


MDM 





* 05-5 -B03-1- 1 

120 

FA MDM 

LOSS OF OUTPUT 


05-5 -B03-1-2 

122 

FA MDM 

LOSS OF OUTPUT 

! 

* 05-5 -B03-2-1 

108 

FF MDM 

LOSS OF OUTPUT 

m 

05-5 -B03-2-2 

107 

FF MDM 

LOSS OF OUTPUT 


05-5 -B03-5-1 

141 

PF MDM 

LOSS OF OUTPUT 

— 

05-5 -B03-5-2 

142 

PF MDM 

LOSS OF OUTPUT 

m 

7. 05-6S-BRES3-1 

190 

RESISTOR 

OPEN 


7 . 05— 6S-BRPC3- 1 

191 

RPC 

LOSS OF OUTPUT 


7. 05— 6S-BSW3 -1 

193 

SWITCH 

PREMATURE OPERATION 


7. 05— 6S-BSW5 -3 

195 

. 

SWITCH 

FAILS-TO-TRANSFER 

L 

m 

GPC 




i 

* 05-5 -BO 1-1-1 

205 

CPU 

LOSS OF OUTPUT 

■j 

* 05-5 -B02-1-1 

201 

I OP 

LOSS OF OUTPUT 


05-5 -B02-1-3 

225 

I OP 

ERRONEOUS OUTPUT 


7. 05-5 -B 17- 1-1 

210 

SWITCH 

LOSS OF OUTPUT 


7. 05-6S-BDIOX-1 

230 

DIODE 

FAILS OPEN 


7. 05-6S-BSW1 -3 

217 

SWITCH 

FAILS OPEN 


MCDS 




1 

05-5— B22— 1—1 

300 

SWITCH 

ERRONEOUS OUTPUT 


05-5— B23- 1 -3 

307 

KBD ADAPTER 

ERRONEOUS OUTPUT 


7. 05-5— B24-1-1 

300 

SWITCH 

FAILS OPEN 

1 

DBC 





05-5-B 14-1-1 

315 

DBC 

FAILS OPEN/SHORT 






B 

MMU 





05-5-B20-1-1 

415 

SWITCH 

FAILS-TO-TRANSFER 

. „ 

EIU 





7. EIU-1 

508 

EIU 

ERRONEOUS OUTPUT 


7. EIU— 2 

509 

SWITCH 

SHORT-TO-GROUND 


7. 05-5 -BOB- 1-1 

501 

CIA 

NO OUTPUT 

— 

7. 05-6S— BCKT1-1 

507 

POWER CKT 

FAILS OPEN/SHORT 



IDA ISSUE 

ADDED TO CIL POST 51-L 


D-2 


NOTE 


* 

7 . 






















APPENDIX E 
DETAILED ANALYSIS 

This section contains the IOA analysis worksheets generated 
during the analysis of this subsystem. The information on these 
worksheets is intentionally similar to the NASA FMEAs . Each of 
these sheets identifies the hardware item being analyzed, and 
parent assembly, as well as the function. For each failure mode, 
the possible causes are outlined, and the assessed hardware and 
functional criticality for each mission phase is listed, as 
described in the NSTS 22206, Instr uctions for Preparation of FMEA 
and CIL, 10 October 1986. Finally, effects are entered at the 
Bottom of each sheet, and the worst case criticality is entered 
at the top. 


LEGEND FOR IOA ANALYSIS WORKSHEETS 


Hardware Criticalities: 

1 * Loss of life or vehicle 

2 = Loss of mission or next failure of any redundant item 

(like or unlike) could cause loss of life/vehicle 

3 ' - All others 

Functional Criticalities: 

1R » Redundant hardware items (like or unlike) all of which, 
if failed, could cause loss of life or vehicle. 

2R » Redundant hardware items (like or unlike) all of which, 
if failed, could cause loss of mission. 


Redundancy Screen A: 

I = Is Checked Out PreFlight 

- 2 = Is Capable of Check Out PreFlight 

3 = Not Capable of Check Out PreFlight 

NA = Not Applicable 


Redundancy Screens B and C: 
P = Passed Screen 
F - Failed Screen 
NA = Not Applicable 
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INDEPENDENT ORBITER ASSESSMENT 



ORBITER SUBSYSTEM 

ANALYSIS WORKSHEET 


DATE: 

10/03/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

DPS 

FLIGHT: 

3/1R 

MDAC ID: 

100 

ABORT: 

3/1R 

ITEM: 

MDM FF1, FF2 , FF3 , FF4 


FAILURE MODE: Loss of Output 

to GPC 


LEAD ANALYST: W. A. Haufler 

SUBSYS LEAD: B. Robb 



BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) Flight critical Forward MDM (FF1..4) 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/2R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/2R 

AOA: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING 

: 3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

c [ p ] 

LOCATION: Av Bay 

1/2, 3, 2 



PART NUMBER: MC615-0004-6110, 5110 




CAUSES: Vibration, Corrosion, Contamination 


EFFECTS/RATIONALE : 

FCOS sets Commfault flag for that data. Application SW ignores 
that data. FCOS bypasses MDM after 2nd consecutive commfault, 
and displays fault msg on CRTs. Port moding may recover MDM, but 
not allowed during ascent until after 2nd MDM failure. 

If all redundancy fails, lose use of IMU torquing, forward RCS 
jets. Hand Controls (THC,RHC) , most switches and indicators. 


REFERENCES : 


REPORT DATE 12/20/86 
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INDEPENDENT ORBITER ASSESSMENT 



ORBITER SUBSYSTEM 

ANALYSIS WORKSHEET 


DATE: 

10/03/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

DPS 

FLIGHT: 

3/1R 

MDAC ID: 

101 

ABORT: 

3/1R 

ITEM: 

MDM FF1,FF2,FF3,FF4 


FAILURE MODE: Loss of Output 

to LRU 


LEAD ANALYST: W. A. Haufler 

SUBSYS LEAD: B. Robb 



BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) Flight critical Forward MDM (FF1..4) 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/2R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/2R 

AO A: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/ SAFING 

: 3/1R 

- 


REDUNDANCY SCREENS: 

A [ 1 ] 

B [*p 3 

C [ P ] 

LOCATION: Av Bay 

1,2, 3, 2 

' 



PART NUMBER: MC615-0004-6110 , 5110 

CAUSES: Vibration, Corrosion, Contamination 

EFFECTS/RATIONALE : 

FCOS does not directly detect this error via MDM Return Word 
processing. Fault tolerance depends on redundant strings to 
voting LRUs. Detection depends on separate, redundant feedback 
signals. 

If all redundancy fails, lose use of IMU torquing, forward RCS 
jets. Hand Controls (THC,RHC) , most switches and indicators. 


REFERENCES : 


REPORT DATE 12/20/86 
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INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

10/03/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

DPS 

FLIGHT: 

3/1R 

MDAC ID: 

102 

ABORT: 

3/1R 

ITEM: 

MDM FF1, FF2 , FF3 , 

FF4 


FAILURE MODE 

: Erroneous Output 

to GPC - ' 


LEAD ANALYST 

W. A. Haufler 

SUBSYS LEAD: B. Robb 



BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) Flight critical Forward MDM (FF1..4) 

4) 

5) 

6 ) 

7) 


8) 

9) 





CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

3/1R 

LIFTOFF: . 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/2R 

AO A: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING 

: 3/1R 

■ 


REDUNDANCY SCREENS: 

A [ 1 ]' 

B [ P 3 

c [ p ] 

LOCATION: Av Bay 

1,2, 3, 2 



PART NUMBER: MC615-0004-6110, ! 

5110 


CAUSES: Vibration, Corrosion, 

Contamination 

* 


EFFECTS/RATIONALE : 

FCOS sets Commfault flag for that data. Application SW ignores 
that data. FCOS bypasses MDM after 2nd consecutive commfault, 
and displays fault msg on CRTs. Port moding may recover MDM, but 
not allowed during ascent until after 2nd MDM failure. 

If all redundancy fails, lose use of IMU torquing, forward RCS 
jets, Hand Controls (THC,RHC), most switches and indicators. 


REFERENCES : 


REPORT DATE 12/20/86 
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INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

103 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: MDM FF1,FF2,FF3,FF4 

FAILURE MODE: Erroneous Output to LRU 

LEAD ANALYST: W. A. Haufler • SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) Flight critical Forward MDM (FF1..4) 

4) 

5) 

6 ) 

7) 

3) 

9) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/2R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/2R 

AOA: 

3/1R 

DEORBIT: 

LANDING/SAFING 

3/1R 
: 3/1R 

ATO: 

3/1R 

REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION: Av Bay 1,2, 3, 2 

PART NUMBER: MC615-0004-6110,5110 




CAUSES: Vibration, Corrosion, Contamination 


EFFECTS/RATIONALE : 

FCOS does not directly detect this error via MDM Return Word 
processing. Fault tolerance depends on redundant strings to 
voting LRUs. Detection de pen ds on separate, redundant feedback 
signals. 

If all redundancy fails, lose use of IMU torquing, forward RCS 
jets. Hand Controls (THC,RHC), most switches and indicators. 


REFERENCES : 


REPORT DATE 12/20/86 
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INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

10/03/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

DPS 

FLIGHT: 

3/1R 

MDAC ID: 

104 

ABORT: 

3/1R 

ITEM: 

MDM FF1 , FF2 , FF3 , FF4 



FAILURE MODE 

: Premature Operation 

to GPC 


LEAD ANALYST 

: W. A. Haufler 

SUBSYS LEAD: B. Robb 



BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) Flight critical Forward MDM (FF1..4) 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE HDW/FUNC ABORT 

PRELAUNCH: 3/2R RTLS: 

LIFTOFF: 3/1R TAL: 

ONORBIT: 3/2R AO A: 

DEORBIT: 3/1R ATO: 

LANDING/SAFING: 3/1R 


REDUNDANCY SCREENS: A [ 1 ] B [ P ] 


LOCATION: Av Bay 1,2, 3, 2 

PART NUMBER: MC615-0004-6110, 5110 


CAUSES: Vibration, Corrosion, Contamination 


HDW/FUNC 

3/1R 

3/1R 

3/1R 

3/1R 


c [ p ] 


EFFECTS/RATIONALE : 

This failure on either port can interfere with FCOS returning 
data from other BTU(s) and cause healthy BTU(s) to be bypassed. 
Port moding will not fix a blabbing MDM. Power cycling may reset 
electronics, but cannot be performed during ascent 
(power switches cannot be reached), and will not always stop 
premature operations. If all redundancy fails, lose use of IMU 
torquing, forward RCS jets, Hand Controls (THC,RHC) , most 
switches and indicators. 


REFERENCES : 


REPORT DATE 12/20/86 
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INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

105 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: MDM FF1 , FF2 , FF3 , FF 4 

FAILURE MODE: Premature Operation to LRU 

LEAD ANALYST: W. A. Haufler SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) Flight critical Forward MDM (FF1..4) 

4 ) 

5) 

6 ) 

7) 

8 ) 


^ I 

FLIGHT PHASE 

CRITICALITIES 
HDW/FUNC ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/2R 

AO A: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

• LANDING/S AFING 

: 3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION: Av Bay 

1,2, 3, 2 

\ 

. 

PART NUMBER: MC615-0004-6110, 

5110 


CAUSES: Vibration, Corrosion, 

Contamination 



EFFECTS/RATIONALE : 

FCOS does not directly detect this error via MDM Return Word 
processing. Fault tolerance depends on redundant strings to 
voting LRUs. Detection depends^ on separate, redundant feedback 
signals. 

If all redundancy fails, lose use of IMU torquing, forward RCS 
jets, Hand Controls (THC,RHC), most switches and indicators. 


REFERENCES : 


REPORT DATE 12/20/86 
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INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

106 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: MDM FF1 , FF2 , FF3 , FF4 

FAILURE MODE: Selected All Channels Wrong 


LEAD ANALYST: W, A. Haufler SUBSYS LEAD: B. Robb 

BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) t _ 

3) Flight critical Forward MDM (FF1..4) 

4 ) 

5 ) 

6 ) 

7 ) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/2R 

AO A: 

3/1R 

DEORBIT: 
LANDING/ SAFING 

3/1R 
: 3/1R 

ATO: 

3/1R 

REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION : Av Bay 1 N , 2 , 3 , 2 

PART NUMBER: MC615-0004-6110, 5110 

- 

' 


CAUSES: Vibration, Corrosion, Contamination 

EFFECTS/RATIONALE : .. . 

The GPC's FCOS and the LRUs would reject all data from that MDM 
except any data that happened to be in the same format as the 
expected data. Redundancy Mgt. soon detects and bypasses that 
MDM, and the effects of wrong data input or output is minimized. 
If all redundancy fails, lose use of IMU torquing, forward RCS 
jets. Hand Controls (THC,RHC) , most switches and indicators. 


REFERENCES : 


REPORT DATE 12/20/86 
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INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

107 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: MDM FF1,FF2,FF3,FF4 

FAILURE MODE: Stuck on a Constant Output to LRU 


LEAD ANALYST: W. A. Haufler SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 


1 ) 

2 ) 

3 ) 

4 ) 

5 ) 

6 ) 

7 ) 

8) 
9 ) 


DPS 

Multiplexer-DeMultiplexers (MDM) 
Flight critical Forward MDM (FF1..4) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/2R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/2R 

AOA: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING 

: 3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION: Av Bay 

1,2, 3, 2 



PART NUMBER: MC615-0004-6110, 5110 




CAUSES: Vibration, Corrosion, Contamination 


EFFECTS/RATIONALE : 

FCOS does not directly detect this error via MDM Return Word 
processing. Fault tolerance depends on redundant strings to 
voting LRUs. Detection depends on separate, redundant feedback 
signals. 

If all redundancy fails, lose use of IMU torquing, forward RCS 
jets, Hand Controls (THC,RHC), most switches and indicators. 


REFERENCES : 


REPORT DATE 12/20/86 
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INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

108 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: MDM FF1, FF2 , FF3 , FF4 

FAILURE MODE: Falsely Stuck on Busy Mode 


LEAD ANALYST: W. A. Haufler SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) Flight critical Forward MDM (FF1..4) 

4) 

5) 

6 ) 

7) 

8 ) 

9) 



CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/2R 

AOA: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING 

: 3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION: Av Bay 

1,2, 3, 2 



PART NUMBER: MC615-0004-6110, 5110 

tat a 



CAUSES: Vibration, Corrosion, Contamination, SCU Busy Cross- 

strap stuck high 

EFFECTS/RATIONALE : 

FCOS sets Commfault flag for that data. Application SW ignores 
that data. FCOS bypasses MDM after 2nd consecutive commfault, 
and displays fault msg on CRTs. Port moding may recover MDM, but 
not allowed during ascent until after 2nd MDM failure. 

If all redundancy fails, lose use of IMU torquing, forward RCS 
jets. Hand Controls (THC,RHC) , most switches and indicators. 


REFERENCES : 


REPORT DATE 12/20/86 
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INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

120 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: MDM FA1 , FA2 , FA3 , FA4 

FAILURE MODE: Loss of Output to GPC 


LEAD ANALYST: W. A. Haufler SUBSYS LEAD: B. Robb 

BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) Flight critical Aft MDM (FA1..4) 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

3/1R 

LIFTOFF: - 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/2R 

AO A: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/ SAFING 

: 3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B { P ] 

C [ P ] 

LOCATION: Av Bay ' 

4, 5, 6, 6 


. 

PART NUMBER: ' MC615-0004-6110, 5110 


- 


CAUSES: Vibration, Corrosion, Contamination 


EFFECTS/RATIONALE : 

FCOS sets Commfault flag for that data. Application SW ignores 
that data. FCOS bypasses MDM after 2nd consecutive commfault, 
and displays fault msg on CRTs. Port moding may recover MDM, but 
not allowed during ascent until after 2nd MDM failure. 

If all redundancy fails, lose use of aft RCS, Body Flap, 

Ailerons, Rudder, Speedbrake, and ability to purge SSMEs and 
tanks . 


REFERENCES : 


REPORT DATE 12/20/86 


E-ll 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

121 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM: MDM FA1 , FA2 , FA3 , FA4 

FAILURE MODE: Loss of Output to LRU 


LEAD ANALYST: W. A. Haufler 


SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers 

3) Flight critical Aft MDM 

4) 

5) 

6 ) 

7) 

8 ) 

9) 


(MDM) 

(FA1..4) 


CRITICALITIES 


FLIGHT PHASE ’ 

HDW/FUNC 

ABORT 

PRE LAUNCH: 

3/2R 

RTLS 

LIFTOFF: 

3/lR 

TAL: 

ONORBIT: 

3/2R 

AO A: 

DEORBIT: 

3/lR 

ATO: 

LANDING/ SAFING: 

3/lR 



HDW/FUNC 

3/lR 

3/1R 

3/lR 

3/lR 


REDUNDANCY SCREENS: A[l] B[P] C[P] 


LOCATION: ■ ’ Av Bay 4, 5, 6, 6 

PART' NUMBER: MC615-0004-6110, 5110 


CAUSES: Vibration, Corrosion, Contamination 


EFFECTS/RATIONALE : 

FCOS does not directly detect this error via MDM Return Word 
processing. Fault tolerance depends on redundant strings to 
voting LRUs. Detection depends on separate, redundant feedback 
signals. 

If all redundancy fails, lose use of aft RCS, Body Flap, 
Ailerons, Rudder, Speedbrake, and ability to purge SSMEs and 
tanks. 


REFERENCES : 


REPORT DATE 12/20/86 


E-12 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

122 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: 

FAILURE MODE: 


MDM FA1 , FA2 , FA3 , FA4 
Erroneous Output to GPC 


LEAD ANALYST: W. A. Haufler 


SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) Flight critical Aft MDM (FA1..4) 

4) 

5) 

6 ) 

7) 

8 ) 

9) 


CRITICALITIES 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 

REDUNDANCY SCREENS: 


HDW/FUNC 

3/2R 

3/1R 

3/2R 

3/1R 

3/1R 

A [ 1 3 


ABORT 
RTLS: 
TAL: 
AO A: 
ATO: 


B [ P ] 


HDW/FUNC 

3/1R 

3/1R 

3/1R 

3/1R 


C [ P ] 


LOCATION: 
PART NUMBER: 


Av Bay 4 , 5 , 6 , 6 
MC615-0 004-6110, 5110 


CAUSES: Vibration, Corrosion, Contamination 


EFFECTS/RATIONALE : 

FCOS sets Commfault flag for that data. Application SW ignores 
that data. FCOS bypasses MDM after 2nd consecutive commfault, 
and displays fault msg on CRTs. Port moding may recover MDM, but 
not allowed during ascent until after 2nd MDM failure. 

If all redundancy fails, lose use of aft RCS, Body Flap, 

Ailerons, Rudder, Speedbrake, and ability to purge SSMEs and 
tanks . 


REFERENCES : 


REPORT DATE 12/20/86 


E-13 



INDEPENDENT ORB I TER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

123 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM : MDM FA1 , FA2 , FA3 , FA4 

FAILURE MODE: Erroneous Output to LRU 


LEAD ANALYST: W. A. Haufler SUBSYS LEAD: B. Robb 

BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) Flight critical Aft MDM (FA1..4) 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/2R 

AO A: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/ SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: Av Bay 4, 5, 6, 6 

PART NUMBER: MC615'-0004-6110, 5110 

CAUSES: Vibration, Corrosion, Contamination 


EFFECTS/RATIONALE: 

FCOS does not directly detect this error via MDM Return Word 
processing. Fault tolerance depends on redundant strings to 
voting LRUs. Detection depends on separate, redundant feedback 
signals. 

If all redundancy fails, lose use of aft RCS, Body Flap, 
Ailerons, Rudder, Speedbrake, and ability to purge SSMEs and 
tanks . 


REFERENCES : 


REPORT DATE 12/20/86 


E-14 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

124 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM : MDM FA1, FA2 , FA3 , FA4 

FAILURE MODE: Premature Operation to GPC 


LEAD ANALYST: W. A. Haufler SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) Flight critical Aft MDM (FA1..4) 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/2R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/2R 

AO A: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/ SAFING 

: 3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION: Av Bay 

4, 5, 6, 6 



PART NUMBER: MC615-0004-6110, 5110 




CAUSES: Vibration, Corrosion, Contamination 


EFFECTS/RATIONALE : 

This failure on either port can interfere with FCOS returning 
data from other BTU(s) and cause good BTU(s) to be bypassed. 

Port moding will not fix a blabbing MDM. Power cycling may reset 
electronics, but cannot be performed during ascent 
(power switches cannot be reached), and will not always stop 
premature operations. If all redundancy fails, lose use of aft 
RCS, Body Flap, Ailerons, Rudder, Speedbrake, and ability to 
purge SSMEs and tanks. 


REFERENCES : 


REPORT DATE 12/20/86 


E-15 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

125 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: MDM FA1 , FA2 , FA3 , FA4 

FAILURE MODE: Premature Operation to LRU 

LEAD ANALYST: W. A. Haufler SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) Flight critical Aft MDM (FA1..4) 

4 ) 

5 ) 

6 ) 

7 ) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/2R 

AOA: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING 

: 3/1R 

: ‘ ■ 


REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

c C p ] 

LOCATION: . Av Bay 

4,5, 6, 6 




PART NUMBER: MC615-0004-6110, 5110 

CAUSES: Vibration, Corrosion, Contamination 


EFFECTS/RATIONALE: 

FCOS does not directly detect this error via MDM Return Word 
processing. Fault tolerance depends on redundant strings to 
voting LRUs. Detection depends on separate, redundant feedback 

signals. . • ~ ■/. .. . 

If all redundancy fails, lose use of aft RCS, Body Flap, 
Ailerons, Rudder, Speedbrake, and ability to purge SSMEs and 
tanks . 


REFERENCES : 


REPORT DATE 12/20/86 


E-16 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

126 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: MDM FA1 , FA2 , FA3 , FA4 

FAILURE MODE: Selected All Channels Wrong 


LEAD ANALYST: W. A. Haufler 


SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) Flight critical Aft MDM (FA1..4) 

4) 

5) 

6 ) 

7) 

8 ) 

9) 


CRITICALITIES 


FLIGHT PHASE 
PRE LAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY SCREENS: 


HDW/FUNC 

3/2R 

3/1R 

3/2R 

3/1R 

3/1R 

A [ 1 ] 


ABORT 
RTLS: 
TAL: 
AO A: 
ATO: 


B [ P ] 


HDW/FUNC 

3/1R 

3/1R 

3/1R 

3/1R 


C [ P ] 


LOCATION: 
PART NUMBER: 


Av Bay 4 , 5 , 6 , 6 
MC615-0004-6110, 5110 


CAUSES: Vibration, Corrosion, Contamination 


EFFECTS/RATIONALE: 

The GPC's FCOS and the LRUs would reject all data from that MDM 
except any data that happened to be in the same format as the 
expected data. Redundancy Mgt. soon detects and bypasses that 
MDM, and the effects of wrong data input or output is minimized. 
If all redundancy fails, lose use of aft RCS, Body Flap, 
Ailerons, Rudder, Speedbrake, and ability to purge SSMEs and 
tanks . 


REFERENCES : 


REPORT DATE 12/20/86 


E-17 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

127 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM : MDM FA1 , FA2 , FA3 , FA4"“ 

FAILURE MODE: Stuck on a Constant Output to LRU 


LEAD ANALYST: W. A. Haufler SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) Flight critical Aft MDM (FA1..4) 

4) 

5) 

6 ) 

7) 

3) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/2R 

AO A: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/1R 

■ - - - - --- - - 

--- - ■ 

REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

c [ P ] 


LOCATION: Av Bay 4, 5, 6, 6 

PART NUMBER: MC615-0004-6110, 5110 

CAUSES: Vibration, Corrosion, Contamination 


EFFECTS/RATIONALE : 

FCOS does not directly detect this error via MDM Return Word 
processing. Fault tolerance depends on redundant strings to 
voting LRUs. Detection depends on separate, redundant feedback 
signals. 

If all redundancy fails, lose use of aft RCS, Body Flap, 
Ailerons, Rudder, Speedbrake, and ability to purge SSMEs and 
tanks . 


REFERENCES : 


C-3 


REPORT DATE 12/20/86 


E-18 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


HDW/FUNC 
3/1R 
3/1R 

ITEM: MDM FAX , FA2 , FA3 , FA4 

FAILURE MODE: Falsely Stuck on Busy Mode 

LEAD ANALYST: W. A. Haufler SUBSYS LEAD: B. Robb 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

128 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) Flight critical Aft MDM (FA1..4) 

4 ) 

5 ) 

6 ) 

7 ) 

3 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/2R 

AO A: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING 

: 3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION: Av Bay 

4, 5, 6, 6 




PART NUMBER: MC615-0004-6110, 5110 


CAUSES: Vibration, Corrosion, Contamination, SCU Busy Cross- 

strap stuck high 


EFFECTS/RATIONALE: 

FCOS sets Commfault flag for that data. Application SW ignores 
that data. FCOS bypasses MDM after 2nd consecutive commfault, 
and displays fault msg on CRTs. Port moding may recover MDM, but 
not allowed during ascent until after 2nd MDM failure. 

If all redundancy fails, lose use of aft RCS, Body Flap, 

Ailerons, Rudder, Speedbrake, and ability to purge SSMEs and 
tanks . 


REFERENCES : 


REPORT DATE 12/20/86 


E-19 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

140 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/3 


ITEM: MDM PF1, PF2 

FAILURE MODE: Loss of Output to GPC 


LEAD ANALYST: W. A. Haufler SUBSYS LEAD: B. Robb 

BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) Payload Forward MDM (PF1..2) 

4) 

5) 

6) 

7) 

8 ) • • 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/1R 

AO A: 

3/3 

DEORBIT: 
LANDING/ SAFING 

3/3 
: 3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION: Av Bay 

1,2 ■ 



PART NUMBER: .MC615-0004-6710, 

CAUSES: Vibration, Corrosion, 

5710 

Contamination 



EFFECTS/RATIONALE : 

FCOS/BSS sets Commfault flag for that data. Application SW 
ignores that data. System software bypasses MDM after 2nd 
consecutive commfault, and displays fault msg on CRTs. Port 
moding may not recover MDM. 

If all redundancy fails, lose ability to release, open, close, 
and latch Payload Bay Doors, and ability to cradle and latch RMS 
arm without an EVA. 


REFERENCES : 


REPORT DATE 12/20/86 


E-20 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

141 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/3 


ITEM: MDM PF1,PF2 

FAILURE MODE: Loss of Output to LRU 

LEAD ANALYST: W. A. Haufler SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) Payload Forward MDM (PF1..2) 

4 ) 

5 ) 

6 ) 

7 ) 

3 ) 

9 ) 



- CRITICALITIES 

FLIGHT PHASE 

HDW/FUNC 

ABORT 

PRE LAUNCH: 

3/2R 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/1R 

AO A: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 



HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY SCREENS: A [ 1 ] B[P] C[P] 

LOCATION: Av Bay 1,2 

PART NUMBER: MC615-0004-6710, 5710 


CAUSES: Vibration, Corrosion, Contamination 


EFFECTS/RATIONALE : 

FCOS/BSS does not directly detect this error via MDM Return Word 
processing. Fault tolerance depends on redundant PF MDMs. 
Detection depends on separate, redundant feedback signals. 

If all redundancy fails, lose ability to release, open, close, 
and latch Payload Bay Doors, and ability to cradle and latch RMS 
arm without an EVA. 


REFERENCES : 


REPORT DATE 12/20/86 


E-21 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE! 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

142 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/3 


ITEM: MDM PF1, PF2 

FAILURE MODE: Erroneous Output to GPC 


LEAD ANALYST: W. A. Haufler SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) Payload Forward MDM (PF1..2) 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/1R 

AO A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

c c p ] " 


LOCATION: Av Bay 1,2 

PART NUMBER: MC615-0004-6710, 5710 

CAUSES: Vibration, Corrosion, Contamination 

EFFECTS/RATIONALE : 

FCOS/BSS sets Coxnmfault flag for that data. Application SW 
ignores that data. System software bypasses MDM after 2nd 
consecutive commfault, and displays fault msg on CRTs. Port 
moding may not recover MDM. 

If al l redund ancy fails , lose ability to release, open, close, 
and latch Payload Bay Doors, and ability to cradle and latch RMS 
arm without an EVA. 


REFERENCES : 


REPORT DATE 12/20/86 


E-22 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

143 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/3 


ITEM: MDM PF1,PF2 

FAILURE MODE: Erroneous Output to LRU 

LEAD ANALYST: W. A. Haufler SUBSYS LEAD: B. Robb 

BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) Payload Forward MDM (PF1..2) 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/2R 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/1R 

AO A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING 

: 3/3 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION: AV Bay 

1,2 




PART NUMBER: MC615-0004-6710,5710 

CAUSES: Vibration, Corrosion, Contamination 


EFFECTS/RATIONALE : 

FCOS/BSS does not directly detect this error via MDM Return Word 
processing. Fault tolerance depends on redundant PF MDMs. 
Detection depends on separate, redundant feedback signals. 

If all redundancy fails, lose ability to release, open, close, 
and latch Payload Bay Doors, and ability to cradle and latch RMS 
arm without an EVA. 


REFERENCES : 


REPORT DATE 12/20/86 


E-23 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

144 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/3 


ITEM: MDM PF1,PF2 

FAILURE MODE: Premature Operation to GPC 


LEAD ANALYST: W. A. Haufler SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) Payload Forward MDM (PF1..2) 

4 ) 

5 ) 

6 ) 

7 ) 

8) • . 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/2R 

RTLS : 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/1R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: Av Bay 1,2 

PART NUMBER: MC615-0004-6710, 5710 

CAUSES: Vibration, Corrosion^ Contamination 


EFFECTS/RATIONALE : 

This failure on either port can interfere with FCOS/BSS returning 
data from other PF MDM and cause good MDM to be bypassed. Port 
moding will not fix a blabbing MDM. Power cycling may reset 
electronics, but will not always stop premature operations. 

If all redundancy fails, lose ability to release, open, close, 
and latch Payload Bay Doors, and ability to cradle and latch RMS 
arm without an EVA. 


REFERENCES : 


REPORT DATE 12/20/86 


E-24 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


HDW/FUNC 
3/1R 
3/3 

ITEM: MDM PF1, PF2 

FAILURE MODE: Premature Operation to LRU 

LEAD ANALYST: W. A. Haufler SUBSYS LEAD: B. Robb 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

145 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) Payload Forward MDM (PF1..2) 

4) 

5) 

6 ) 

7) 

8 ) 

8 ) 



CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/1R 

AO A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 1 ]' 

B [ P ] 

C [ P ] 


LOCATION: Av Bay 1,2 

PART NUMBER: MC615-0004-6710, 5710 

CAUSES: Vibration, Corrosion, Contamination 

EFFECTS/RATIONALE : 

FCOS/BSS does not directly detect this error via MDM Return Word 
processing. Fault tolerance depends on redundant PF MDMs. 
Detection depends on separate, redundant feedback signals. 

If all redundancy fails, lose ability to release, open, close, 
and latch Payload Bay Doors, and ability to cradle and latch RMS 
arm without an EVA. 


REFERENCES : 


REPORT DATE 12/20/86 


E-25 



INDEPENDENT ORBITER ASSE SSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

146 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/3 


ITEM: MDM PF1,PF2 

FAILURE MODE: Selected All Channels Wrong 


LEAD ANALYST: W. A. Haufler SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMul tip lexers (MDM) 

3) Payload Forward MDM (PF1..2) 

4) 

5) 

6) 

7) 

8) 

9 ) . 



CRITICALITIES 

FLIGHT PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/2R 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/1R 

AO A: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 



HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY SCREENS: A [ 1 ] B[P] C[P] 

LOCATION: Av Bay 1,2 

PART NUMBER: MC615-0004-6710, 5710 


CAUSES: Vibration, Corrosion, Contamination 


EFFECTS/RATIONALE: 

The GPC's FCOS and the LRUs would reject all data from that MDM 
except any data that happened to be in the same format as the 
expected data. Redundancy Mgt. soon detects and bypasses that 
MDM, and the effects of wrong data input or output is minimized. 
If all redundancy fails, lose ability to release, open, close, 
and latch Payload Bay Doors, and ability to cradle and latch RMS 
arm without an EVA. 


REFERENCES : 


REPORT. DATE 12/20/86 


E-26 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

147 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/3 


ITEM: MDM PF1, PF2 

FAILURE MODE: Stuck on a Constant Output to LRU 


LEAD ANALYST: W. A. Haufler SUBSYS LEAD: B. Robb 

BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) Payload Forward MDM (PF1..2) 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

3/3 

LIFTOFF: . 

3/3 

TAL: 

3/3 

ONORBIT: 

3/1R 

AO A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/S AFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: * Av Bay 1,2 

PART NUMBER: MC615-0004-6710, 5710 


CAUSES: Vibration, Corrosion, Contamination 


EFFECTS/RATIONALE : 

FCOS/BSS does not directly detect this error via MDM Return Word 
processing. Fault tolerance depends on redundant PF MDMs. 
Detection depends on separate, redundant feedback signals. 

If all redundancy fails, lose ability to release, open, close, 
and latch Payload Bay Doors, and ability to cradle and latch RMS 
arm without an EVA. 


REFERENCES : 


REPORT DATE 12/20/86 


E-27 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 10/03/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: DPS FLIGHT: 3/1R 

MDAC ID: 148 ABORT: 3/3 


ITEM: MDM PF1,PF2 

FAILURE MODE: Falsely Stuck on Busy Mode 


LEAD ANALYST: W. A. Haufler 


SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) Payload Forward MDM (PF1..2) 

4) 

5) 

6 ) 

7) 

8 ) 

9) 


CRITICALITIES 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


HDW/FUNC 

3/2R 

3/3 

3/1R 

3/3 

3/3 


ABORT 
RTLS: 
TAL: 
AO A: 
ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY SCREENS: A [ 1 ] B[P] C [ P ] 

LOCATION: Av Bay 1,2 

PART NUMBER: MC615-0004-6710, 5710 


CAUSES: Vibration, Corrosion, Contamination, SCU Busy Cross 

strap stuck high 


EFFECTS/RATIONALE : 

FCOS/BSS sets Commfault flag for that data. Application SW 
ignores that data. System software bypasses MDM after 2nd 
consecutive commfault, and displays fault msg on CRTs. Port 
moding may not recover MDM. 

If all redundancy fails, lose ability to release, open, close, 
and latch Payload Bay Doors, and ability to cradle and latch RMS 
arm without an EVA. 


REFERENCES : 


REPORT DATE 12/20/86 


E-28 


I MU>ili 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

10/03/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

DPS 

FLIGHT: 

3/2R 

MDAC ID: 

180 

ABORT: 

/NA 

ITEM: 

MDM LF1, LAI 



FAILURE MODE 

: Loss of Output 

to GPC 


LEAD ANALYST 

': W. A. Haufler 

SUBSYS LEAD: B. Robb 



BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) PreLaunch Forward & Aft MDM (LF,LA) 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 



FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 


PRE LAUNCH: 

3/2R 

RTLS: 

/NA 


LIFTOFF: 

/NA 

TAL: 

/NA 


ONORBIT: 

/NA 

AO A: 

/NA 


DEORBIT: 

/NA 

ATO: 

/NA 


LANDING/ SAFING: 

3/2R 


- 

- 

REDUNDANCY SCREENS: 

A [ 1 ] 

B [NA ] 

C [ P ] 


LOCATION: Av Bay 1,6 

PART NUMBER: MC615-0004-6610, 5600 

CAUSES: Vibration, Corrosion, Contamination 

EFFECTS/RATIONALE: 

FCOS sets Commfault flag for that data. Application SW ignores 
that data. FCOS bypasses MDM after 2nd consecutive commfault, 
and displays fault msg on CRTs. Port moding may recover MDM. 

If all redundancy fails, lose ability of GSE to monitor and 
control systems while attached. 


REFERENCES : 


REPORT DATE 12/20/86 


E-29 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

10/03/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

DPS 

FLIGHT: 

3/2R 

MDAC ID: 

181 

ABORT: 

/NA 

ITEM: 

MDM LF1,LA1 



FAILURE MODE 

: Loss of Output to 

LRU 


LEAD ANALYST 

: W. A. Haufler 

SUBSYS LEAD: B. Robb 



BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) preLaunch Forward & Aft MDM (LF,LA) 

4) 

5) 

6 ) 

7) 

8 ) 

9) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FU1 

PRE LAUNCH: 

3/2R 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AO A: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/ SAFING: 

3/2R 


- 

REDUNDANCY SCREENS: 

A [ 1 ] 

w 
1 — 1 

& 

1 — 1 

C [ P ] 


LOCATION: Av Bay 1,6 

PART NUMBER: MC615-0004-6610, 5600 

CAUSES: Vibration, Corrosion, Contamination 

EFFECTS/RATIONALE : 

FCOS does not directly detect this error via MDM Return Word 
processing. Fault tolerance depends on redundant strings to 
voting LRUs. Detection depends on separate, redundant feedback 
signals. 

If all redundancy fails, lose ability of GSE to monitor and 
control systems while attached. 


REFERENCES : 


REPORT DATE 12/20/86 


E-30 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

10/03/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

DPS 

FLIGHT: 

3/2R 

MDAC ID: 

182 

ABORT: 

/NA 

ITEM: 

MDM LF1,LA1 



FAILURE MODE 

: Erroneous Output 

to GPC 


LEAD ANALYST 

: W. A. Haufler 

SUBSYS LEAD: B. Robb 



BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) preLaunch Forward & Aft MDM (LF,LA) 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AO A: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

3/2R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [NA ] 

C [ P ] 


LOCATION: Av Bay 1,6 

PART NUMBER: MC615-0004-6610, 5600 

CAUSES: Vibration, Corrosion, Contamination 


EFFECTS/RATIONALE : 

FCOS sets Commfault flag for that data. Application SW ignores 
that data- FCOS bypasses MDM after 2nd consecutive commfault, 
and displays fault msg on CRTs. Port moding may recover MDM, but 
not allowed during ascent until after 2nd MDM failure. 

If all redundancy fails, lose ability of GSE to monitor and 
control systems while attached. 


REFERENCES : 


REPORT DATE 12/20/86 


E-31 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

183 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/2R 

ABORT: /NA 


ITEM: MDM LF1,LA1 

FAILURE MODE: Erroneous Output to LRU 


LEAD ANALYST: W. A. Haufler SUBSYS LEAD: B. Robb 

BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) preLaunch Forward & Aft MDM (LF,LA) 

4 ) 

5 ) 

6 ) 

7 ) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING 

: 3/2R 



REDUNDANCY SCREENS: 

A [ 1 ] B 

[NA ] 

c [ p ] 

LOCATION: Av Bay 

1,6 



PART NUMBER: MC615-0004-6610, 5600 

' r:; ' / •• 



CAUSES: Vibration, Corrosion, Contamination 


EFFECTS/RATIONALE : 

FCOS does not directly detect this error via MDM Return Word 
processing. Fault tolerance depends on redundant strings to 
voting LRUs. Detection depends on separate, redundant feedback 
signals. 

If all redundancy fails, lose ability of GSE to monitor and 
control systems while attached. 


REFERENCES : 


REPORT DATE 12/20/86 


E-32 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

184 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/2R 

ABORT: /NA 


ITEM: MDM LF1, LAI 

FAILURE MODE: Premature Operation to GPC 


LEAD ANALYST: W. A. Haufler SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) preLaunch Forward & Aft MDM (LF,LA) 

4 ) 

5 ) 

6) 

7 ) 

8 ) 

9 ) 


HDW/FUNC 

/NA 

/NA 

/NA 

/NA 


c [ P ] 

LOCATION: Av Bay 1,6 

PART NUMBER: MC615-0004-6610, 5600 

CAUSES: Vibration, Corrosion, Contamination 


CRITICALITIES 


FLIGHT PHASE 
PRE LAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


HDW/FUNC 

3/2R 

/NA 

/NA 

/NA 

3/2R 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY SCREENS: 


A [ 1 ] 


B [NA ] 


EFFECTS/RATIONALE : 

This failure on either port can interfere with FCOS returning 
data from other BTU(s) and cause good BTU(s) to be bypassed. 

Port moding will not fix a blabbing MDM. Power cycling may reset 
electronics, but will not always stop premature operations. 

If all redundancy fails, lose ability of GSE to monitor and 
control systems while attached. 


REFERENCES : 


REPORT DATE 12/20/86 


E-33 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

185 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/2R 

ABORT: /NA 


ITEM: MDM LF1, LAI 

FAILURE MODE: Premature Operation to LRU 

LEAD ANALYST: W. A. Haufler SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) preLaunch Forward & Aft MDM (LF,LA) 

4) 

5) 

6) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/2R 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

3/2R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [NA ] 

C [ P ] 


LOCATION: Av Bay 1,6 

PART NUMBER: MC615-0004-6610, 5600 

CAUSES: Vibration, Corrosion, Contamination 


EFFECTS/RATIONALE : 

FCOS does not directly detect this error via MDM Return Word 
processing. Fault tolerance depends on redundant strings to 
voting LRUs. Detection depends on separate, redundant feedback 
signals. 

If all redundancy fails, lose ability of GSE to monitor and 
control systems while attached. 


REFERENCES : 


REPORT DATE 12/20/86 


E-34 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

186 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/2R 

ABORT: /NA 


ITEM: MDM LF1, LAI 

FAILURE MODE: Selected All Channels Wrong 


LEAD ANALYST: W. A. Haufler SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) preLaunch Forward & Aft MDM (LF,LA) 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AO A: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING 

: 3/2R 



REDUNDANCY SCREENS: 

A [ 1 ] B 

[NA ] 

C [ P ] 

LOCATION: Av Bay 

1,6 



PART NUMBER: MC615-0004-6610, 5600 




CAUSES: Vibration, Corrosion, Contamination 


EFFECTS/RATIONALE : 

The GPC's FCOS and the LRUs would reject all data from that MDM 
except any data that happened to be in the same format as the 
expected data. Redundancy Mgt. soon detects and bypasses that 
MDM, and the effects of wrong data input or output is minimized. 
If all redundancy fails, lose ability of GSE to monitor and 
control systems while attached. 


REFERENCES : 


REPORT DATE 12/20/86 


E-35 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

187 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/2R 

ABORT: /NA 


ITEM: MDM LF1, LAI 

FAILURE MODE: Stuck on a Constant Output to LRU 


LEAD ANALYST: W. A. Haufler SUBSYS LEAD: B. Robb 

BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) preLaunch Forward & Aft MDM (LF,LA) 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING 

: 3/2R 



REDUNDANCY SCREENS: 

A [ 1 ] B 

$ 

» — i 

C [ P ] 

LOCATION: Av Bay 

1,6 



PART NUMBER: MC615-0004-6610, 5600 




CAUSES: Vibration, Corrosion, Contamination 


EFFECTS/RATIONALE : 

FCOS does not directly detect this error via MDM Return Word 
processing. Fault tolerance depends on redundant strings to 
voting LRUs. Detection depends on separate, redundant feedback 
signals. 

If all redundancy fails, lose ability of GSE to monitor and 
control systems while attached. 


REFERENCES : 


REPORT DATE 12/20/86 


E-3 6 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

10/03/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

DPS 

FLIGHT: 

3/2R 

MDAC ID: 

188 

ABORT: 

/NA 

ITEM: 

FAILURE MODE 

MDM LF1, LAI 
: Falsely Stuck on 

Busy Mode 


LEAD ANALYST 

': W. A. Haufler 

SUBSYS LEAD: B. Robb 



BREAKDOWN HIERARCHY: 

1) DPS 

2) Multiplexer-DeMultiplexers (MDM) 

3) preLaunch Forward & Aft MDM (LF,LA) 

4) 

5) 

6 ) 

7) 

8 ) 

9) 


CRITICALITIES 


FLIGHT PHASE 
PRE LAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 

. LANDING/SAFING: 


HDW/FUNC 

3/2R 

/NA 

/NA 

/NA 

3/2R 


ABORT 
RTLS: 
TAL: 
AO A: 
ATO: 


HDW/FUNC 

/NA 

/NA 

/NA 

/NA 


REDUNDANCY SCREENS: 


A [ 1 ] 


B [NA ] 


C [ P ] 


LOCATION: Av Bay 1,6 

PART NUMBER: MC615-0004-6610,5600 


CAUSES: Vibration, Corrosion, Contamination, SCU Busy Cross- 

strap stuck high 


EFFECTS/RATIONALE : 

FCOS sets Commfault flag for that data. Application SW ignores 
that data. FCOS bypasses MDM after 2nd consecutive commfault, 
and displays fault msg on CRTs. Port moding may recover MDM. 

If all redundancy fails, lose ability of GSE to monitor and 
control systems while attached. 


REFERENCES : 


REPORT DATE 12/20/86 


E-37 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10 / 22/86 

DPS 

190 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: RESISTOR, CURRENT LIMITING 

FAILURE MODE: OPEN 


LEAD ANALYST: W. A. HAUFLER SUBSYS LEAD: B. ROBB 

BREAKDOWN HIERARCHY: 

1) DPS 

2) MULTIPLEXER-DEMULTIPLEXERS (MDM) 

3) POWER DISTRIBUTION 

4) RESISTOR, CURRENT LIMITING 

5) 

6 ) 

7) 

8 ) 

9) 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 
HDW/FUNC . ABORT 


3/2R 

3/1R 

3/2R 

3/1R 

3/1R 


RTLS: 
TAL: 
AO A: 
ATO: 


HDW/FUNC 

3/1R 

3/1R 

3/1R 

3/1R 


REDUNDANCY SCREENS: A [ 1 ] B [ F ] C [ P ] 

LOCATION: v , ■ 

PART NUMBER: RWR8-0S1211FR 

CAUSES: THERMAL STRESS, VIBRATION, SHOCK, FRACTURE 


EFFECTS/RATIONALE : 

NO EFFECT ON ONE FAILURE SINCE MDM ARE NOT INTERRUPTED WITH LOSS 
OF ONE-OF-TWO POWER CIRCUITS. NO EFFECT ON FAILURES OF BOTH 
RESISTORS (NO LOSS OF VECHICLE) SINCE MDM ARE ALSO REDUNDANT. 


REFERENCES : 


REPORT DATE 12/20/86 


E-38 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10 / 22/86 

DPS 

191 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: CONTROLLER, REMOTE POWER 

FAILURE MODE: LOSS OF OUTPUT, FAILS TO CONDUCT, OPEN OR SHORT TO 

GROUND 


LEAD ANALYST: W. A. HAUFLER SUBSYS LEAD: B. ROBB 

BREAKDOWN HIERARCHY: 

1) DPS 

2) MULTIPLEXER-DEMULTIPLEXERS (MDM) 

3) POWER DISTRIBUTION 

4) CONTROLLER, REMOTE POWER 

5) 

6 ) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/2R 

AO A: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ F ] 

C [ P ] 


LOCATION: 

PART NUMBER: MC450-0017-2050, 2075 

CAUSES: PIECE PART STRUCTURE FAILURE, VIBRATION, THERMAL STRESS 

EFFECTS/RATIONALE : 

NO EFFECT ON ONE FAILURE SINCE MDM ARE NOT INTERRUPTED WITH LOSS 
OF ONE-OF-TWO POWER CIRCUITS. NO EFFECT ON FAILURE (NO LOSS OF 
VEHICLE) OF BOTH RESISTORS SINCE MDM ARE ALSO REDUNDANT. 


REFERENCES : 


REPORT DATE 12/20/86 


E-39 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10 / 22/86 

DPS 

192 


HIGHEST CRITICALITY HDW/FUHC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: CONTROLLER, REMOTE POWER 

FAILURE MODE: INADVERTENT OPERATION: CONDUCTS PREMATURELY 


LEAD ANALYST: W. A. HAUFLER SUBSYS LEAD: B. ROBB 

BREAKDOWN HIERARCHY: 

1) DPS 

2) MULTIPLEXER-DEMULTIPLEXERS (MDM) 

3) POWER DISTRIBUTION 

4) CONTROLLER, REMOTE POWER 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3. 

TAL: 

3/3 

ONORBIT: 

3/3 

AO A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 


- 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: 
PART NUMBER: 


CAUSES: CONTAMINATION,. SHOCK, PIECE PART FAILURE 

EFFECTS/RATIONALE : 

NO EFFECT ON ANY MDMs THAT ARE OPERATIONAL THROUGHOUT THE ENTIRE 
MISSION (FF1, 3 AND FA1,2). POWER WILL BE APPLIED TO ANY ONE OF 
THE FOLLOWING MDMs: FF2,4 AND FA3,4 IF ITS DEDICATED SWITCH 

FAILS AND IF THE APPROPRIATE POWER BUSSES ARE "ON". 


REFERENCES : 


REPORT DATE 12/20/86 


E-40 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10 / 22/86 

DPS 

193 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: SWITCH, MDM POWER 

FAILURE MODE: FAILS OPEN 


LEAD ANALYST: W. A. HAUFLER SUBSYS LEAD: B. ROBB 

BREAKDOWN HIERARCHY: 


1) 

DPS 





2) 

MULTIPLEXER-DEMULTIPLEXERS 

(MDM) 



3) 

FA, FF2 , FF4 , AND 

PF MDMS 




4) 

POWER DISTRIBUTION 




5) 

SWITCH, MDM POWER 





6) 






7) 






8) 






9) 








CRITICALITIES 



FLIGHT PHASE 

HDW/FUNC 


ABORT 

HDW/FUNC 


PRELAUNCH: 

3/2R 


RTLS: 

3/1R. 


LIFTOFF: 

3/1R 


TAL: 

3/1R 


ONORBIT: 

3/2R 


AO A: 

3/1R 


DEORBIT: 

3/1R 


ATO: 

3/1R 


LANDING/SAFING: 

3/1R 




REDUNDANCY SCREENS: 

A [ 1 ] 

B 

[ F ] 

c [ P 3 


LOCATION: 

PART NUMBER: ME452-0102-7201 


CAUSES: PIECE-PART STRUCTURAL FAILURE, CONTAMINATION, MECHANICAL 

SHOCK, VIBRATION 


EFFECTS/RATIONALE : 

NO EFFECT ON ONE FAILURE SINCE MDM ARE NOT INTERRUPTED WITH LOSS 
OF ONE-OF-TWO POWER CIRCUITS. NO EFFECT ON FAILURES OF BOTH 
RESISTORS (NO LOSS OF VEHICLE) SINCE MDMs ARE ALSO REDUNDANT. 


REFERENCES : 


REPORT DATE 12/20/86 


E-41 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10 / 22/86 

DPS 

194 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: SWITCH, MDM POWER ... 

FAILURE MODE: PREMATURE OPERATION: CLOSES INADVERTENTLY 


LEAD ANALYST: W. A. HAUFLER SUBSYS LEAD: B. ROBB 

BREAKDOWN HIERARCHY: 

1) DPS 

2) MULTIPLEXER-DEMULTIPLEXERS (MDM) 

3) FA, FF2 , FF4 , AND PF MDMs 

4) POWER DISTRIBUTION 

5) SWITCH, MDM POWER 

6 ) 

7 ) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AO A: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 



HDW/FUNC 

* 3/3 

3/3 

3/3 

3/3 


REDUNDANCY SCREENS: A [NA ] B [NA ] C [NA ] 

LOCATION : 

PART NUMBER: ME452-0102-7201 


CAUSES: PIECE-PART STRUCTURAL FAILURE, SHOCK, VIBRATION, THERMAL 

STRESS 


EFFECTS/RATIONALE : 

NO EFFECT ON MDMs THAT ARE OPERATIONAL THROUGHOUT THE ENTIRE 
MISSION. THIS SWITCH FAILURE WILL INADVERTENTLY POWER UP MDMs 
THAT MIGHT BE OFF; I.E. FA3 , FA4 , FF2 , AND FF4. NO LOSS OF 
VEHICLE . 


REFERENCES : 


E-42 


REPORT DATE 12/20/86 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

10/22/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

DPS 

FLIGHT: 

3/1R 

MDAC ID: 

195 

ABORT: 

3/1R 

ITEM: 

SWITCH, MDM POWER 



FAILURE MODE 

:: FAILS OPEN 



LEAD ANALYST 

': W. A. HAUFLER 

SUBSYS LEAD: B. ROBB 



BREAKDOWN HIERARCHY: 

1) DPS 

2) MULTIPLEXER-DEMULTIPLEXERS (MDM) 

3) FF1, AND FF3 MDMs 

4) POWER DISTRIBUTION 

5) SWITCH, MDM POWER 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

3/1R 

. LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

. 3/2R 

AO A: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 
REDUNDANCY SCREENS: 

3/1R 
A [ 1 ] 

B [ F ] 

c [ p ] 


LOCATION,: • 

PART NUMBER: ME452-0102-7210 


CAUSES: STRUCTURAL FAILURE, CONTAMINATION, MECHANICAL SHOCK, 

VIBRATION 

EFFECTS/RATIONALE: 

NO EFFECT ON ONE FAILURE SINCE MDM ARE NOT INTERRUPTED WITH LOSS 
OF ONE-OF-TWO POWER CIRCUITS. TWO FAILURE (LOSS OF BOTH POWER 
CIRCUITS AND THUS BOTH FF1 AND FF3) WOULD CAUSE LOSS OF ONE NSP 
INTERFACE . 

WORKAROUND EXISTS TO UPDATE STATE VECTOR WITH LOSS OF BOTH FF1 
AND FF3 . . 


REFERENCES : 


REPORT DATE 12/20/86 


E-43 



INDEPENDENT ORBITER ASSESSMENT , 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

201 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: Input/Output Processor (IOP) 

FAILURE MODE: Loss of output 


LEAD ANALYST: T. B. Cribbs SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

2) General Purpose Computer (GPC) 

3) Input/Output Processor (IOP) 

4) 

5) 

6 ) 

7) 

8) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/2R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/2R 

AO A: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION: Av Bays 

PART NUMBER: 


• 



CAUSES: MIA Fails to output to data bus due to piece/part 

failure from contamination or mechanical, thermal, or electrical 
overstress, or power failure 

EFFECTS/RATIONALE: 

Loss of a bus-commanding MIA results in loss of a GPC's ability 
to communicate over that bus, attached bus terminal units 
(BTU's), and all inputs and outputs connected to those BTU's. 

In dynamic flight phases, where a single BTU controls an 
actuator, the crew would have to manually intervene on a single 
failure, and switching transients could arise. Loss of all 
redundancy would cause loss of vehicle control. 


REFERENCES: JSC 18820, JSC 11174, JSC 12770 


REPORT DATE 12/20/86 


E-44 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

202 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: Input/Output Processor (IOP) 

FAILURE MODE: Erratic/Erroneous Output 


LEAD ANALYST: T. B. Cribbs SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

2) General Purpose Computer (GPC) 

3) Input/ Output Processor (IOP) 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/2R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/2R 

AO A: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: Av Bays 

PART NUMBER: 

CAUSES: Component failure due to contamination or mechanical, 

thermal, or electrical overstress in MIA, ALU, MUX, Local Store, 
or Memory 


EFFECTS/RATIONALE : 

Critical GPC outputs are validated by sumword comparison; 
however, errors are downlinked and logged, but not corrected. 
MDM/Actuator hardware cancels the effects of an erroneous output 
from a single channel by "Force fighting", but multiple 
failures during critical flight phases would likely result in 
loss of vehicel/life. 


REFERENCES: JSC 18820, JSC 11174, JSC 12770 


REPORT DATE 12/20/86 


E-45 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10 / 22/86 

DPS 

203 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: Input/Output Processor (IOP) 

FAILURE MODE: Premature Operation ; 


LEAD ANALYST: T. B. Cribbs SUBS YS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

2) General Purpose Computer (GPC) 

3) Input/Output Processor (IOP) 

4) 

5) 

6 ) 

7) 

3) 

9) 



CRITICALITIES 

FLIGHT PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

2/1R 

TAL: 

ONORBIT: 

3/2R 

AO A: 

DEORBIT: 

2/1R 

ATO: 

LANDING/ SAFING: 

2/1R 



HDW/FUNC 

2/1R 

2/1R 

3/1R 

3/1R 


REDUNDANCY SCREENS: A [ 1 ] 


B [ P ] 


c [ p ] 


LOCATION: Av Bays 

PART NUMBER: 

CAUSES: Control monitor, channel control, MSC, or microcode 

store failure results in invalid execution of program. Caused by 
piece/part failure. 


EFFECTS/RATIONALE : 

Premature issuance of critical outputs is detected by other GPC's 
in the Redundant Set. GPC fails to sync and strings are bypassed 
by other GPC's. Faulty commands are still passed to the actuator 
by failed GPC. Premature commands to actuators 
during dynamic flight phases would likely result in loss of 
vehicle/life, if actuator redundancy was lost or if simultaneous 
loss of two output channels. 


REFERENCES: JSC 18820, JSC 11174, JSC 12770 


REPORT DATE 12/20/86 


E-46 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

204 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: 

FAILURE MODE: 


Input/Output Processor (IOP) 
Erroneous Input 


LEAD ANALYST: T. B. Cribbs 


SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

General Purpose Computer (GPC) 
Input/Output Processor (IOP) 


2 ) 

3 ) 

4 ) 

5 ) 

6 ) 

7 ) 

8 ) 
9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/2R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/2R 

AO A: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDTNG/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: 
PART NUMBER: 


Av Bays 


CAUSES: Component failure due to contamination or mechanical, 

thermal, or electrical overstress in MIA, ALU, MUX, Local Store, 
Memory, or DMA Queue 


EFFECTS/RATIONALE : 

Critical GPC/IOP inputs are validated thru parity checking. 
Recurring input errors result in either GPC "fail-to-sync" 
bringing down an erring GPC, or ignoring inputs from an erring 
MDM via a GPC mask. Erroneous inputs, if propagated through 
the GPC, could result in erroneous command outputs and loss of 
vehicle/life, if complete function was lost. 


REFERENCES: JSC 18820, JSC 11174, JSC 12770 


REPORT DATE 12/20/86 


E-47 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

205 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/lR 

ABORT: 3/1R 


ITEM: Central Processing Unit (CPU) 

FAILURE MODE: Loss of output 


LEAD ANALYST: T. B. Cribbs SUBSYS LEAD: B. Robb 

BREAKDOWN HIERARCHY: 

1) DPS 

2) General Purpose Computer (GPC) 

3) Central Processing Unit (CPU) 

4) 

5) 

6 ) 

7) 

8 ) 

9) 


CRITICALITIES 


' FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

• . PRELAUNCH: 

3/3 

RTLS: 

3/lR 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/2R 

AO A: 

3/lR 

DEORBIT: 

3/1R 

ATO: 

3/lR 

LANUING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A[ 1 ] 

B [ p ] 

c [ P ] 


LOCATION: Av Bays 

"PART NUMBER:- 


CAUSES: CPU fails to function due to loss of power or failure of 

memory timing page 




EFFECTS/RATIONALE : 

In dynamic flight phases where redundant set (RS) is operating, 
other GPC' s recognize GPC failing to sync and issue fail votes 
against it. The failing GPC's voting logic then removes it from 
the RS. Four RS GPC's control critical flight 

fun ctio ns; if at least three are lost, the 5th GPC (backup flight 
computer, BFS) is engaged. Loss of BFS would result in loss of 
vehicle/life. 


REFERENCES: JSC 18820, JSC 11174, JSC 12770 


REPORT DATE 12/20/86 


E-48 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

206 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: Central Processing Unit (CPU) 

FAILURE MODE: Erroneous/erratic output 


LEAD ANALYST: T. B. Cribbs SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

2) General Purpose Computer (GPC) 

3) Central Processing Unit (CPU) 

4 ) 

5 ) 

6 ) 

7 ) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO A: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

.LANDING/ SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

c [ p ] 

LOCATION:, Av Bays 

PART NUMBER: 

\ 


- 


CAUSES: CPU outputs invalid data to IOP due to memory parity 

error, or failure of Master Bus Control, ALU, Data Flow Mux, or 
Local Store 


EFFECTS/RATIONALE : 

Critical GPC outputs are validated by sumword comparison to 
outputs from redundant GPC's? however, detected errors are merely 
logged and downlinked without corrective action. Invalid command 
outputs are passed through Bus Terminal Units (BTU's) 
to actuators which "force fight" the redundant commands in order 
to vote out the erroneous command. Loss of more than one output 
channel to the same actuator would require crew intervention, 
possibly causing instable switchover transients. 


REFERENCES: JSC 18820, JSC 11174, JSC 12770 


REPORT DATE 12/20/86 


E-49 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

207 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: Central Processing Unit (CPU) 

FAILURE MODE: Del ayed/premature/ inadvertent operation 


LEAD ANALYST: T. B. Cribbs SUBSYS LEAD: B. Robb 

BREAKDOWN HIERARCHY: 

1) DPS 

2) General Purpose Computer (GPC) 

3) Central Processing Unit (CPU) 

4) 

5) 

6 ) 

7) 

8 ) 

9) 



CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/2R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AO A: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/S AFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


-LOCATION: Av Bays ' 

PART NUMBER: 

CAUSES: CPU attempts to output data at inappropriate time due to 

processor slow-down while servicing recurring I/O errors, failure 
of interrupt logic, or intermittence in timing page. 


EFFECTS/RATIONALE : 

Redundant Set GPC’s synch up by waiting for synch point messages 
from other GPC’s to indicate completion of identical operations. 
Excessive processor load could require all GPC’s to wait 
excessively, but each GPC would recognize the slow down 
and issue a fail-to-synch vote, and the slow GPC’s voting logic 
would remove it from the RS. If performance of all GPC’s was 
degraded during dynamic flight phases, vehicle instability could 
occur unless crew took control. 


REFERENCES: JSC 18820, JSC 11174, JSC 12770 


REPORT DATE 12/20/86 


E-50 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

208 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: Central Processing Unit (CPU) 

FAILURE MODE: Inadvertent operation 


LEAD ANALYST: T. B. Cribbs SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

2) General Purpose Computer (GPC) 

3) Central Processing Unit (CPU) 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 



CRITICALITIES 

FLIGHT PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

2/1R 

. TAL: 

ONORBIT: 

3/3 

AO A: 

DEORBIT: 

2/1R 

ATO: 

LANDING/S AFING: 

2/1R 



HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


REDUNDANCY SCREENS: A [ 1 ] 


B [ P ] C [ P ] 


LOCATION: Av Bays 

PART NUMBER: 


CAUSES: CPU attempts to output data on incorrect data bus due to 

errors in memory locations containing configuration or bus- 
stringing parameters. 


EFFECTS/RATIONALE : 

Loss of memory in bus assignment table (NBAT) could result in a 
GPC attempting to command a data bus commanded by another GPC. 
Both examine their respective NBAT and assume no error condition, 
and continue transmission on that same bus. 

This would cause all data on that bus to be erroneous. 
Furthermore, idle bus is created and 2 command paths are lost. 
Possible to outvote good commands: loss of vehicle/life. 


REFERENCES: JSC 18820, JSC 11174, JSC 12770 


REPORT DATE 12/20/86 


E-51 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

209 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: CPU Power Switch 

FAILURE MODE: Fails closed 


LEAD ANALYST: T. B. Cribbs 


SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

2) General Purpose Computer (GPC) 

3) Central Processing Unit (CPU) 

4) CPU Power Switch 

5) 

6 ) 

7) 

8 ) 

9) 



CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

PRELAUNCH: 

3/3 

LIFTOFF: 

3/3 

ONORBIT: 

3/3 

DEORBIT: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY SCREENS: 

A [NA ] 

LOCATION: Panel 06 

PART NUMBER: 



ABORT 

HDW/FUNC 

— 

RTLS: 

3/3 

I 

TAL: 

3/3 


AOA: 

3/3 



ATO: 

3/3 

1 

[NA ] 

C [NA ] 



CAUSES: CPU power switch, is stuck in the "on” position due to 

contamination 


EFFECTS/RATIONALE : 

Flight rules dictate that the crew should power off any GPC which 
has recurring errors during dynamic flight phases, as soon as 
possible to avoid erroneous outputs being sent to actuators. If 
the CPU power switch were stuck in th e "on" 
position and another GPC began sending erroneous data, the 
actuators could not vote out the erroneous commands and the crew 
would need to take manual control. 


REFERENCES: JSC '18820, JSC 11174, JSC 12770 


REPORT DATE 12/20/86 


E-52 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

210 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: GPC Mode Switch 

FAILURE MODE: Fails closed 

LEAD ANALYST: T. B. Cribbs SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

2) General Purpose Computer (GPC) 

3) Central Processing Unit (CPU) 

4) GPC Mode Switch 

5) 

6 ) 

7) 

8 ) 

9 ) 



CRITICALITIES 

FLIGHT PHASE 

HDW/FUNC 

ABORT 

PRE LAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/1R 

TAL: 

ONORBIT: 

3/2R 

AO A: 

DEORBIT: 

3/1R 

ATO: 

LANDING/SAFING: 

3/1R 



HDW/FUNC 

3/1R 

3/1R 

3/1R 

3/1R 


REDUNDANCY SCREENS: A [ 1 ] B[P] C[P] 

LOCATION: Panel 06 

PART NUMBER: 


CAUSES: CPU mode switch is stuck in the "halt” or "standby" 

position due to contamination 


EFFECTS/RATIONALE : 

If the mode switch for a GPC were stuck in a non-run position the 
GPC would in effect be disabled, similar to. failing to halt. The 
remaining GPC's would ignore this GPC, and the GPC would not be 
available as a backup or redundant member. If all 
GPC's were stuck in the standby mode, the crew could not perform 
critical flight control functions. 


REFERENCES: JSC 18820, JSC 11174, JSC 12770 


REPORT DATE 12/20/86 


E-53 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

10/03/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

DPS 

FLIGHT: 

3/1R 

MDAC ID: 

211 

ABORT: 

3/1R 

ITEM: 

GPC Output Switch 



FAILURE MODE 

: Fails closed 



LEAD ANALYST 

': T. B. Cribbs 

SUBSYS LEAD: B. Robb 



BREAKDOWN HIERARCHY: 

1) DPS 

2) General Purpose Computer (GPC) 

3) Central Processing Unit (CPU) 

4) GPC Output Switch 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

• 3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/3 

AOA: 

3/lR 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/S AFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ i ] 

B [ P ] 

C [ P ] 


LOCATION: Panel 06 

PART NUMBER: 


CAUSES: CPU output switch is stuck in the "terminate" or 

"backup" position due to contamination 

EFFECTS/RATIONALE : 

If the Output Switch were stuck in the "terminate" position, this 
would have the same effect of disabling the GPC's output; all 
switches in this position would cause loss of vehicle control. 

If the switch were stuck in the "backup" position this GPC would 
only be available as BFS. If all switches in "backup" GPC 5 would 
be backup when engaged. 


REFERENCES: JSC 18820, JSC 11174, JSC 12770 


REPORT DATE 12/20/86 


E-54 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

10/03/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

DPS 

FLIGHT: 

3/1R 

MDAC ID: 

213 

ABORT: 

3/1R 

ITEM: 

GPC Power Switch 



FAILURE MODE 

: Fails open 



LEAD ANALYST 

T. B. Cribbs 

SUBSYS LEAD: B. Robb 



BREAKDOWN HIERARCHY: 

1) DPS 

2) General Purpose Computer (GPC) 

3) Central Processing Unit (CPU) 

4) GPC Power Switch 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE ’ 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/2R 

AO A: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 1 1 

B [ p 3 

C [ P ] 

LOCATION: ’ Panel 06 

PART 'NUMBER: 


• 



CAUSES: CPU power switch is stuck in "off" position, or GPC 

power is lost 

EFFECTS/RATIONALE : 

If the GPC power switch were stuck in the "OFF" position, the GPC 
could not function, same as CPU Loss of Output. 


REFERENCES: JSC 18820, JSC 11174, JSC 12770 


REPORT DATE 12/20/86 


E-55 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10 / 20/86 

DPS 

214 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: /NA 


ITEM: DRIVER MODULE CONTROLLER 

FAILURE MODE: PREMATURE OUTPUT 


LEAD ANALYST: B. ROBB SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) GENERAL PURPOSE COMPUTER 

3) POWER DISTRIBUTION 

4) DRIVER MODULE CONTROLLER 

5) 

6 ) 

7) 

8 ) 

9) 


(GPC) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: • 

/NA 

AO A: 

/NA * 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/S AFING: 

/NA 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: 
PART NUMBER: 


CAUSES: INTERNAL COMPONENT FAILURE 

EFFECTS/RATIONALE : 

PREMATURE OPERATION CAUSES POWER TO BE APPLIED TO A GPC. NO 
HARMFUL EFFECTS TO POWER UP A GPC. 


REFERENCES : 


REPORT DATE 12/20/86 


E-56 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 

10/20/86 

DPS 

215 

HIGHEST 

CRITICALITY 

FLIGHT: 

ABORT: 

HDW/FUNC 

3/1R 

3/1R 

ITEM: 

DRIVER MODULE 

CONTROLLER 



FAILURE MODE: NO OUTPUT 




LEAD ANALYST: B. ROBB 

SUBSYS LEAD: B. 

ROBB 



BREAKDOWN HIERARCHY: 

1) DPS 

2) GENERAL PURPOSE COMPUTER (GPC) 

3) POWER DISTRIBUTION 

4) DRIVER MODULE CONTROLLER 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/1R 

AO A: 

3/1R 

DEORBIT: 

LANDING/SAFING: 

3/1R 

3/1R 

ATO: 

3/1R 

REDUNDANCY SCREENS: A [ 1 J 

LOCATION : 

PART NUMBER: 

CAUSES: INTERNAL COMPONENT 

w 
1 — 1 
*d 

* i 

c [ P ] 


EFFECTS/RATIONALE : 

LOSS ONE OF THREE REDUNDANT POWER SOURSES TO A GPC. 


REFERENCES : 


REPORT DATE 12/20/86 


E-57 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10 / 20/86 

DPS 

216 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: SWITCH, GPC POWER 

FAILURE MODE: PREMATURE CLOSURE 


LEAD ANALYST: B. ROBB SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) GENERAL PURPOSE COMPUTER (GPC) 

3) POWER DISTRIBUTION 

4) SWITCH, GPC POWER 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 
LANDING/ SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: 
PART NUMBER: 


CAUSES: VIBRATION, PIECE PART FAILURE 


EFFECTS/RATIONALE : 

THE MAIN DC POWER IS APPLIED TO THE GPC. NO HARMFUL EFFECTS TO 
APPLY POWER TO A GPC. 


REFERENCES : 


REPORT DATE 12/20/86 


E-58 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

10/20/86 


HIGHEST 

CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

DPS 



FLIGHT: 

2/1R 

MDAC ID: 

217 



ABORT: 

2/1R 

ITEM: 

SWITCH, GPC 

POWER 




FAILURE MODE 

FAILS OPEN 





LEAD ANALYST 

: B. ROBB 

SUBSYS 

LEAD: B. 

ROBB 



BREAKDOWN HIERARCHY: 

1) DPS 

2) GENERAL PURPOSE COMPUTER (GPC) 

3) POWER DISTRIBUTION 

4) SWITCH, GPC POWER 

5) 

6) 

7) 

3) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

2/1R 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

2/1R 

AOA: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/S AFING: 

2/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: 
PART NUMBER: 


CAUSES: VIBRATION, PIECE PART FAILURE 

EFFECTS/RATIONALE: 

POSSIBLE MISSION TERMINATION ON FIRST FAILURE. SECOND FAILURE 
COULD CAUSE LOSS OF CREW AND VEHICLE. IF FAILURE OCCURS CLOSE TO 
MECO THERE IS NOT ENOUGH TIME TO MANUALLY SHUT DOWN ENGINES TO 
PREVENT CAVITATION. 


REFERENCES : 


REPORT DATE 12/20/86 


E-59 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10 / 20/86 

DPS 

218 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: STATUS LIGHT 

FAILURE MODE: NO OUTPUT 


LEAD ANALYST: B. ROBB SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) GENERAL PURPOSE COMPUTER (GPC) 

3) GENERAL PROCESSING UNIT (CPU) 

4) STATUS LIGHT 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: 

PART NUMBER: 

CAUSES: FILAMENT FAILURE, VIBRATION 

EFFECTS/RATIONALE : 

NO EFFECT. CRT DISPLAYS GPC STATUS, BARBER POLE INDICATES OUTPUT 
OF FAILED GPC IS TERMINATED. 


REFERENCES : 


REPORT DATE 12/20/86 


E-60 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

10/20/86 

HIGHEST 

CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

DPS 


FLIGHT: 

3/3 

MDAC ID: 

219 


ABORT: 

3/3 

ITEM: 

CICU 




FAILURE MODE 

;: NO OUTPUT 




LEAD ANALYST 

': B. ROBB 

SUBSYS LEAD: B. 

ROBB 



BREAKDOWN HIERARCHY: 

1) DPS 

2) GENERAL PURPOSE COMPUTER (GPC) 

3) GENERAL PROCESSING UNIT (CPU) 

4) COMPUTER INTERFACE CONDITIONING UNIT (CICU) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: . 

3/3 

AO A: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION : , 

PART NUMBER: 


CAUSES: INTERNAL COMPONENT FAILURE, VIBRATION 

EFFECTS/RATIONALE: 

NO EFFECT. LOSS OF CONVERSION POWER TO DRIVE GPC STATUS LIGHTS 
HAS SAME EFFECT AS LOSS OF STATUS LIGHT. OTHER INDICATORS 
PROVIDE GPC HEALTH STATUS. 


REFERENCES : 


REPORT DATE 12/20/86 


E-61 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10 / 20/86 

DPS 

220 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/2R 

ABORT: 3/2R 


ITEM: SWITCH, IPL 

FAILURE MODE: PREMATURE OPERATION 


LEAD ANALYST: B. ROBB SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) GENERAL PURPOSE COMPUTER (GPC) 

3) SWITCH, IPL 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 


ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 


RTLS: 

3/2R 

LIFTOFF: 

3/2R 


TAL: - 

3/2R 

ONORBIT: 

3/2R 


AOA: 

3/2R 

DEORBIT: 

3/2R 


ATO: 

3/2R 

LANDING/SAFING: 3/2R 




REDUNDANCY SCREENS 

: A [ 1 ] 

B 

[ P ] 

c [ p ] 

LOCATION: 
PART NUMBER: 

N 


- 

, 

CAUSES: VIBRATION, 

PIECE PAST 

FAILURE 


EFFECTS/RATIONALE : 
NO EFFECT IF GPC IS 

IN RUN OR STANDBY 

MODE. IPL 

NOT NECESSARY 


IN-FLIGHT UNLESS ANOTHER FAILURE OCCURS TO GPC FIRST. 


REFERENCES : 


REPORT DATE 12/20/86 


E-62 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10 / 20/86 

DPS 

221 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: INDICATOR, IPL 

FAILURE MODE: PREMATURE OPERATION 


LEAD ANALYST: B. ROBB SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) GENERAL PURPOSE COMPUTER (GPC) 

3) INDICATOR, IPL 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 
REDUNDANCY SCREENS: 

3/3 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION : 
PART NUMBER: 


CAUSES: VIBRATION, SHOCK 
EFFECTS/RATIONALE : 

A FALSE INDICATOR OF THE IPL FUNCTION HAS NO EFFECT ON THE GPC. 
IPL FUNCTION CAN BE MONITORED ON COMPUTER ANNUNICATOR PANEL FOR 
GPC STATUS. 


REFERENCES : 


REPORT DATE 12/20/86 


E-63 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 10/20/86 

SUBSYSTEM: DPS 

MDAC ID: 222 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: INDICATOR, IPL 

FAILURE MODE: FAILS TO TRANSFER INDICATION OF GPC MODE 


LEAD ANALYST: B. ROBB 


SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) GENERAL PURPOSE COMPUTER (GPC) 

3) INDICATOR, IPL 


CRITICALITIES 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 
RTLS: 
TAL: 
AO A: 
ATO: 


REDUNDANCY SCREENS: A [NA ] 


B [NA ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA ] 


LOCATION: 

PART NUMBER: 

CAUSES: VIBRATION, SHOCK 

EFFECTS/RATIONALE : 

AN ERRONEOUS INDICATION OF THE GPC STATUS WILL BE DISPLAYED. 
EFFECT ON THE GPC'S FUNCTIONS. 


REFERENCES : 


REPORT DATE 12/20/86 


E-64 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

10/20/86 

HIGHEST 

CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

DPS 


FLIGHT: 

3/3 

MDAC ID: 

223 


ABORT: 

3/3 

ITEM: 

INDICATOR 

OUTPUT, BARBER POLE 


FAILURE MODE 

: ERRONEOUS 

INDICATION 



LEAD ANALYST 

: B. ROBB 

SUBSYS LEAD: B. 

ROBB 



BREAKDOWN HIERARCHY: 

1) DPS 

2) GENERAL PURPOSE COMPUTER 

3) INDICATOR OUTPUT 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


(GPC) 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/S AFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 
RTLS: 
TAL: 
AO A: 
ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY SCREENS: A [NA ] B [NA ] 


C [NA ] 


LOCATION: 
PART NUMBER: 


CAUSES: FAILED DRIVER, SHOCK, VIBRATION 

EFFECTS/RATIONALE : 

INDICATES ERRONEOUS GPC STATUS. NO EFFECT OF GPC FUNCTION. GPC 
STATUS DISPLAYED ON GPC STATUS ANNUNCIATOR. 


REFERENCES : 


REPORT DATE 12/20/86 


E-65 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10 / 20/86 

DPS 

224 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: INDICATOR OUTPUT, BARBER POLE 

FAILURE MODE: FAILS TO TRANSFER 


LEAD ANALYST: B. ROBB SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) GENERAL PURPOSE COMPUTER (GPC) 

3) INDICATOR OUTPUT 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

•3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/S AFING: 

3/3 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: 

PART NUMBER: 

CAUSES: VIBRATION, SHOCK, PIECE PART FAILURE 

EFFECTS /RATIONALE : ... ... 

ERRONEOUS INDICATION OF GPC STATUS. GPC STATUS ANNUNCIATOR CAN 
BE MONITORED OF GPC STATUS. : — 


REFERENCES : 


REPORT DATE 12/20/86 


E-66 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

HDW/FUNC 
2/1R 
2/1R 

ITEM: INPUT/OUTPUT PROCESSOR (IOP) 

FAILURE MODE: ERRONEOUS OUTPUT 

LEAD ANALYST: B. ROBB SUBSYS LEAD: B. ROBB 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/24/86 

DPS 

225 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


BREAKDOWN HIERARCHY: 


1 ) 

2 ) 

3) 

4) 

5) 

6 ) 

7) 

8 ) 
9 ) 


DPS 

GENERAL PURPOSE COMPUTER 
INPUT/ OUTPUT PROCESSOR (IOP) 



CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

2/1R 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

2/1R 

AO A: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

A [ 1 ] . 

B [ P ] 

C [ P ] 


LOCATION : 
PART NUMBER: 


CAUSES: INTERNAL COMPONENT FAILURE 


EFFECTS/RATIONALE : 

MAY EXECUTE COMMAND TO WRONG MDM WITH ADDRESS ERROR. THE WORST 
CASE WOULD BE TO AN UNVOTED EFFECTOR. NO EFFECT ON 1ST FAILURE. 
CREW CAN PRECLUDE SENSITIVITY TO 2ND FAILURE. 


REFERENCES : 


REPORT DATE 12/20/86 


E-67 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/30/86 

DPS 

226 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: /NA 

ABORT: /NA 


ITEM: RESISTOR 

FAILURE MODE: NOT APPLICABLE 


LEAD ANALYST: H J LOWERY SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) GPC 

3) RESISTOR 

4) 

5) 

6) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

/NA 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AO A: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

/NA 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: 
PART NUMBER: 


CAUSES: RESISTOR HAS BEEN REPLACED WITH A FUSE. 


EFFECTS/RATIONALE : 

THIS RESISTOR HAS BEEN REPLACED WITH PART NUMBER ME451-0018-0300 
(SEE FMEA #05-6S-BFUSl-l) 


REFERENCES: FMEA NO. 05-6S-BRES1-1 NASA-JSC FMEA CIL REVIEW 

COMMENTS . 


REPORT DATE 12/20/86 


E-68 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/30/86 

DPS 

227 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: FUSE 

FAILURE MODE: OPEN 

LEAD ANALYST: H J LOWERY SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 


1) 

DPS 

2) 

GPC 

3) 

FUSE 

4) 


5) 


6) 


7) 


8) 


9) 



FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 

3/1R 

3/1R 

3/1R 

3/1R 

3/1R 


ABORT 
RTLS: 
TAL: 
AO A: 
ATO: 


HDW/FUNC 

3/1R 

3/1R 

3/1R 

3/1R 


REDUNDANCY SCREENS: A [ 1 ] B [ P ] 


C [ P ] 


LOCATION: 
PART NUMBER: 


CAUSES: MECHANICAL FRACTURE 


EFFECTS /RATIONALE : 


REFERENCES: FMEA NO. 05-6S-BFUS1-1 


REPORT DATE 12/20/86 


E-69 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/30/86 

DPS 

228 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: CONTROLLER, REMOTE POWER 

FAILURE MODE: LOSS OF OUTPUT 


LEAD ANALYST: H J LOWERY SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) GPC 

3) CONTROLLER, REMOTE POWER 

4 ) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/1R 

AO A: 

3/1R 

DEORBIT: 

LANDING/SAFING: 

3/1R 

3/1R 

ATO: 

3/1R 

REDUNDANCY SCREENS: 

A t 1 ] 

B [ P ] 

c [ p ] 


LOCATION : 

PART NUMBER: 

CAUSES: TEMPERATURE STRESS, MECHANICAL FRACTURES, CONTAMINATION, 

DEBRIS 


EFFECTS/RATIONALE : 

ONE OF THREE REDUNDANT RPC IS DISABLED. 


REFERENCES: FMEA NO. 05-6S-BRPC-1. NASA JSC FMEA CIL REVIEW 

COMMENTS . 


REPORT DATE 12/20/86 


E-70 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


tDATE: 

.SUBSYSTEM: 
f MDAC ID: 


10/30/86 

DPS 

229 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: CONTROLLER, REMOTE POWER 

FAILURE MODE: CONDUCTS PREMATURELY 


LEAD ANALYST: H J LOWERY SUBSYS LEAD: B. ROBB 

BREAKDOWN HIERARCHY: 

1) DPS 

2) GPC 

B) CONTROLLER, REMOTE POWER 
'4) 

'5) 

6 ) 

7) 

tB,) 

»<) 

CRITICALITIES 


FLIGHT PHASE' 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: . 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 



REDUNDAN C Y SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION : 
iPART NUMBER: " 

iQAUSES : TEMPERATURE STRESS, MECHANICAL FRACTURE, CONTAMINATION, 

DEBRIS 

EFFECTS/RATIONALE : 

STONE. POWER WOULD BE APPLIED PREMATURELY. 


REFERENCES: FMEA NO. 05-6S-BRPC1-2. NASA-JSC FMEA CIL REVIEW 

COHfttJi T S . 


3®PQ®T DATE 12/20/86 


E-71 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

DPS 

230 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: DIODE 

FAILURE MODE: FAILS OPEN 

LEAD ANALYST: H J LOWERY SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) GPC 

3) DIODE 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

• PRELAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT; 

3/1R 

AOA: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ F ] 

C [ P ] 

LOCATION : 




PART NUMBER: 




CAUSES: THERMAL STRESS, CONTAMINATION, DEBRIS 



EFFECTS/RATIONALE : 

NONE ON FIRST/SECOND FAILURE. THREE RPC OUTPUTS ARE "OR" TOGETHER 
TO PROVIDE TRIPLY REDUNDANT POWER PATH TO CPU AND IOP. THREE 
FAILURES COULD CAUSE LOSS OF GPC. 


REFERENCES: 05-6S-BDIOX-1. NASA-JSC FMEA & CIL REVIEW COMMENTS. 


REPORT DATE 12/20/86 


E-72 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

DPS 

231 


HIGHEST CRITICALITY HDW/FXJNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: SWITCH, NORMAL-TERM BACK-UP 

FAILURE MODE: PREMATURE OPERATION 


LEAD ANALYST: H J LOWERY SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) GPC 

3) SWITCH, NORMAL-TERM BACKUP 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

. HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R . 

ONORBIT: 

3/1R 

AOA: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/ SAFING: 

3/1R 



REDUNDANCY SCREENS: 

a'[ 1 ] 

B [ P ] 

C [ P ] 

LOCATION: 


\ 


PART NUMBER: 


■ 


CAUSES: THERMAL STRESS, CONTAMINATION, DEBRIS 



EFFECTS/RATIONALE : 

WILL TERMINATE FC DATA BUS I/O ACTIVITY OF A GOOD GPC. 


REFERENCES: 


FMEA 05-5-B15-1-1 


REPORT DATE 12/20/86 


E-73 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

10/20/86 


HIGHEST 

CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

DPS 



FLIGHT: 

3/1R 

MDAC ID: 

232 



ABORT: 

3/1R 

ITEM: 

SWITCH, GPC 

POWER 




FAILURE MODE: NO OUTPUT 





LEAD ANALYST: B. ROBB 

SUBSYS 

LEAD: B. 

ROBB 


BREAKDOWN 

HIERARCHY: 





1) DPS 







2) GENERAL PURPOSE COMPUTER (GPC) 

3) POWER DISTRIBUTION 

4) DRIVER MODULE CONTROLLER 

5) 

6 ) 

7) 

8 ) 

9) 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/1R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/1R 

AO A: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION: 



. ■ 

PART NUMBER: 

CAUSES: INTERNAL COMPONENT 




EFFECTS/RATIONALE : 

LOSS ONE OF THREE REDUNDANT POWER SOURSES TO A GPC. 


REFERENCES : 


REPORT DATE 12/20/86 


E-74 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

10/03/86 

HIGHEST 

CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

DPS 


FLIGHT: 

3/1R 

MDAC ID: 

300 


ABORT: 

3/1R 

ITEM: 

KEYBOARD SWITCH 




FAILURE MODE 

:: OPEN/CLOSED 




LEAD ANALYST 

: H J LOWERY 

SUBSYS LEAD: 

B. ROBB 



BREAKDOWN HIERARCHY: 

1) DPS 

2) MULTIFUNCTIONAL CRT DISPLAY SYSTEM (MCDS) 

3) KEYBOARD 

4) SWITCH 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/1R 

AOA: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: UPPER CREW AREA 

PART NUMBER: 


CAUSES: MECHANICAL FRACTURE/ CONTAMINATION/ DEBRIS 

EFFECTS/RATIONALE : 

LOSS OF INPUTTING COMMAND CAPABILITY. REDUNDANT HARDWARE WOULD 
NOT BE ACCESSIBLE DURING PERIODS OF ANTICIPATED HIGH 
ACCELERATION/DEACCELERATION FORCES. 

ie. 1. LIFT-OFF THROUGH MAIN ENGINE CUT-OFF - APPROXIMATELY 8 MIN 
40 SEC? 2. ENTRY THROUGH SAFEING -APPROXIMATELY 400,000ft (TD -40 
MIN) THROUGH SAFEING. 


REFERENCES : 


REPORT DATE 12/20/86 


E-75 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

301 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: X/Y DEFLECTION AMPLIFIERS 

FAILURE MODE: NO OUTPUT/ERRONEOUS/ERRATIC OUTPUT 

LEAD ANALYST: H J LOWERY SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) MULTIFUNCTIONAL CRT DISPLAY SYSTEM (MCDS) 

3) DISPLAY UNIT 

4) X/Y DEFLECTION AMPLIFIERS 

5) 

6) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/2R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/1R 

AO A: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/S AFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: UPPER CREW AREA 

PART NUMBER: 


CAUSES: TEMPERATURE STRESS/ CONTAMINATION/ DEBRIS 

EFFECTS/RATIONALE: 

LOSS OF MONITORING CAPABILITY. REDUNDANT HARDWARE WOULD NOT BE 
ACCESSIBLE DURING PERIODS OF ANTICIPATED HIGH 
ACCELERATION/DEACCELERATION FORCES. 

ie. 1. LIFT-OFF THROUGH MAIN ENGINE CUT-OFF - APPROXIMATELY 8 MIN 
40 SEC; 2. ENTRY THROUGH SAFEING -APPROXIMATELY 400,000ft (TD -40 
MIN) THROUGH SAFEING. 


REFERENCES : 


o 


REPORT DATE 12/20/86 


E-76 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

302 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: VIDEO AMPLIFIER' 

FAILURE MODE: NO OUTPUT/ERRONEOUS/ERRATIC OUTPUT 


LEAD ANALYST: H J LOWERY SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) MULTIFUNCTIONAL CRT DISPLAY SYSTEM (MCDS) 

3) DISPLAY UNIT 

4) VIDEO AMPLIFIER 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/2R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT:' 

3/1R 

AOA: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/S AFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: UPPER CREW AREA 

PART NUMBER: 


CAUSES: TEMPERATURE STRESS/ CONTAMINATION/ DEBRIS 

EFFECTS/RATIONALE : 

LOSS OF MONITORING CAPABILITY. REDUNDANT HARDWARE WOULD NOT BE 
ACCESSIBLE DURING PERIODS OF ANTICIPATED HIGH 
ACCELERATION/DEACCELERATION FORCES. 

ie. 1. LIFT-OFF THROUGH MAIN ENGINE CUT-OFF - APPROXIMATELY 8 MIN 
40 SEC; 2. ENTRY THROUGH SAFE ING -APPROXIMATELY 400,000ft (TD -40 
MIN) THROUGH SAFEING. 


REFERENCES : 


REPORT DATE 12/20/86 


E-77 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

303 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: CATHODE-RAY TUBE 

FAILURE MODE: NO OUTPUT/ERRONEOUS/ERRATIC OUTPUT 

LEAD ANALYST: H J LOWERY SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) MULTIFUNCTIONAL CRT DISPLAY SYSTEM (MCDS) 

3) DISPLAY UNIT 

4) CATHODE -RAY TUBE 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

' ONORBIT: 

3/1R 

AO A: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

Ml] 

B [ P ] 

c [ P ] 


LOCATION: UPPER CREW AREA 

PART NUMBER: 


CAUSES: SHOCK/ TEMPERATURE STRESS/ MECHANICAL FRACTURE/ 

VIBRATION/ CONTAMINATION/ DEBRIS 

EFFECTS/RATIONALE : 

LOSS OF MONI TORING CAPA BILITY. REDUN DANT HARDW ARE WOULD NOT BE 
ACCESSIBLE DURING PERIODS OF ANTICIPATED” HIGH 
ACCELERATION/DEACCELERATION FORCES. 

ie. 1. LIFT-OFF THROUGH MAIN ENGINE CUT-OFF - APPROXIMATELY 8 MIN 
40 SEC; 2. ENTRY THROUGH SAFEING -APPROXIMATELY 400,000ft (TD -40 
MIN) THROUGH SAFEING. 


REFERENCES : 


REPORT DATE 12/20/86 


E-78 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

304 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: HI AND LOW VOLTAGE POWER SUPPLIES 

FAILURE MODE: NO OUTPUT/ERRONEOUS/ERRATIC OUTPUT 


LEAD ANALYST: H J LOWERY SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) MULTIFUNCTIONAL CRT DISPLAY SYSTEM (MCDS) 

3) DISPLAY UNIT 

4) HIGH AND LOW ( +/- 5 , 15, 28 & 80 VDC) VOLTAGE POWER SUPPLIES 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/2R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

.3/1R 

AO A: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

. B [ P ] 

C [ P ] 


LOCATION: UPPER CREW AREA 

PART NUMBER: 


CAUSES: MECHANICAL FRACTURES/ CONTAMINATION/ DEBRIS 


EFFECTS/RATIONALE : 

LOSS OF MONITORING CAPABILITY. REDUNDANT HARDWARE WOULD NOT BE 
ACCESSIBLE DURING PERIODS OF ANTICIPATED HIGH 
ACCELERATION/DEACCELERATION FORCES. 

ie. 1. LIFT-OFF THROUGH MAIN ENGINE CUT-OFF - APPROXIMATELY 8 MIN 
40 SEC; 2. ENTRY THROUGH SAFEING -APPROXIMATELY 400,000ft (TD -4 0 
MIN) THROUGH SAFEING. 


REFERENCES : 


REPORT DATE 12/20/86 


E-79 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

305 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: RPC 

FAILURE MODE: OPEN/CLOSED/PREMATURE OPERATION 

LEAD ANALYST: H J LOWERY SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) MULTIFUNCTIONAL CRT DISPLAY SYSTEM (MCDS) 

3) DISPLAY UNIT 

4) RPC 

5) 

6 ) 

7 ) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/1R 

AOA: 

3 /IE 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A .[ 1 ] 

B [ P ] 

c [ p ] 


LOCATION: UPPER CREA AREA 

PART NUMBER: 


CAUSES: MECHANICAL FRACTURE/ CONTAMINATION/ DEBRIS 

EFFECTS/RATIONALE : 

LOSS OF MONITORING CAPABILITY. REDUNDANT HARDWARE WOULD NOT BE 
ACCESSIBLE DURING PERIODS OF ANTICIPATED HIGH 
ACCELERATION/DEACCELERATION FORCES. 

ie. 1. LIFT-OFF THROUGH MAIN ENGINE CUT-OFF - APPROXIMATELY 8 MIN 
40 SEC; 2. ENTRY THROUGH SAFEING -APPROXIMATELY 400,000ft (TD -40 
MIN) THROUGH SAFEING. 


REFERENCES : 


REPORT DATE 12/20/86 


E-80 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

306 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: MEMORY 

FAILURE MODE: NO OUTPUT/ERRONEOUS/ERRATIC OUTPUT 


LEAD ANALYST: H J LOWERY SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) MULTIFUNCTIONAL CRT DISPLAY SYSTEM (MCDS) 

3) DEU 

4) MEMORY 

5) 

6 ) 

7) 

8 ) 

9) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/2R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/1R 

AO A: 

3/lR 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/S AFING: 3/1R 



REDUNDANCY SCREENS 

: A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION: UPPER 

CREW AREA 



PART NUMBER: 




CAUSES: CONTAMINATION/ DEBRIS 



EFFECTS/RATIONALE : 




LOSS OF MONITORING 

CAPABILITY. 

REDUNDANT HARDWARE WOULD NOT BE 


ACCESSIBLE DURING PERIODS OF ANTICIPATED HIGH 
ACCELERATION/DEACCELERATION FORCES. 

ie. 1. LIFT-OFF THROUGH MAIN ENGINE CUT-OFF - APPROXIMATELY 8 MIN 
40 SEC; 2. ENTRY THROUGH SAFEING -APPROXIMATELY 400,000ft (TD -40 
MIN) THROUGH SAFEING. 


REFERENCES : 


REPORT DATE 12/20/86 


E-81 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

307 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: KEYBOARD ADAPTER 

FAILURE MODE: NO OUTPUT/ERRONEOUS/ERRATIC OUTPUT 


LEAD ANALYST: H J LOWERY SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 


1 ) 

2 ) 

3) 

4) 

5) 

6 ) 

7) 

8 ) 
9) 


DPS 

MULTIFUNCTIONAL CRT DISPLAY SYSTEM (MCDS) 
DEU 

KEYBOARD ADAPTER 


FLIGHT PHASE 
PRE LAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/S AFING: 


CRITICALITIES 


HDW/FUNC 

3/2R 

3/1R 

3/1R 

3/1R 

3/1R 


ABORT 
RTLS: 
TAL: 
AO A: 
ATO: 


HDW/FUNC 

3/1R 

3/1R 

3/1R 

3/1R 


REDUNDANCY SCREENS: A [ 1 ] B [ P ] 


C [ P ] 


LOCATION: UPPER CREW AREA 

PART NUMBER: 


CAUSES: CONTAMINATION/ DEBRIS 


EFFECTS/RATIONALE: 

LOSS OF INPUTTING COMMAND CAPABILITY. REDUNDANT HARDWARE WOULD 
NOT BE ACCESSIBLE DURING PERIODS OF ANTICIPATED HIGH 
ACCELERATION/DEACCELERATION FORCES. — - - 

ie. 1. LIFT-OFF THROUGH MAIN ENGINE CUT-OFF - APPROXIMATELY 8 MIN 
40 SEC; 2. ENTRY THROUGH SAFEING -APPROXIMATELY 400,000ft (TD -40 
MIN) THROUGH SAFEING. 


REFERENCES : 


REPORT DATE 12/20/86 


E-82 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

308 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: SYMBOL GENERATOR 

FAILURE MODE: NO OUTPUT/ERRONEOUS/ERRATIC OUTPUT 

LEAD ANALYST: H J LOWERY SUBSYS LEAD: B. ROBB 

BREAKDOWN HIERARCHY: 

1) DPS 

2) MULTIFUNCTIONAL CRT DISPLAY SYSTEM (MCDS) 

3) DEU 

4) SYMBOL GENERATOR 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: - 

3/2R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/1R 

AO A: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/S APING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ p ) 

c [ p ] 


LOCATION: UPPER CREW AREA 

PART NUMBER: 


CAUSES: CONTAMINATION/ DEBRIS 

EFFECTS /RATIONALE : 

LOSS OF MONITORING CAPABILITY. REDUNDANT HARDWARE WOULD NOT BE 
ACCESSIBLE DURING PERIODS OF ANTICIPATED HIGH 
ACCELERATION/DEACCELERATION FORCES. 

ie. 1. LIFT-OFF THROUGH MAIN ENGINE CUT-OFF - APPROXIMATELY 8 MIN 
40 SEC; 2. ENTRY THROUGH SAFEING -APPROXIMATELY 400,000ft (TD -40 
MIN) THROUGH SAFEING. 


REFERENCES : 


REPORT DATE 12/20/86 


E-83 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

309 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: MIA 

FAILURE MODE: NO OUT PUT/ ERRONEOUS/ ERRATIC OUTPUT 


LEAD ANALYST: H J LOWERY SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) MULTIFUNCTIONAL CRT DISPLAY SYSTEM (MCDS) 

3 ) DEU 

4) MIA 

5) 

6 ) 


7 ) 

8) 
9) 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/2R 

3/1R 

3/1R 

3/1R 

3/1R 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/1R 

3/1R 

3/1R 

3/1R 


REDUNDANCY SCREENS: A [ 1 ] B [ P ] 


C [ P ] 


LOCATION: UPPER CREW AREA 

PART NUMBER: 


CAUSES: CONTAMIN AT ION/ DEBRIS 


EFFECTS/RATIONALE : 

LOSS OF MONITORING CAPABILITY. REDUNDANT HARDWARE WOULD NOT BE 
ACCESSIBLE DURING PERIODS OF ANTICIPATED HIGH 

ACCELERATION/D EACCELERA TION FOR CE S. .... . ...... _ . 

ie. 1. LIFT-OFF THROUGH MAIN ENGINE CUT-OFF - APPROXIMATELY 8 MIN 
40 SEC; 2. ENTRY THROUGH SAFEING -APPROXIMATELY 400,000ft (TD -40 
MIN) THROUGH SAFEING. 


REFERENCES : 


REPORT DATE 12/20/86 


E-84 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

310 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: CONTROL LOGIC 

FAILURE MODE: NO OUTPUT/ERRONEOUS/ERRATIC OUTPUT 


LEAD ANALYST: H J LOWERY SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) MULTIFUNCTIONAL CRT DISPLAY SYSTEM (MCDS) 

3) DEU 

4) CONTROL LOGIC 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

3/2R 

3/1R 

3/1R 

3/1R 

3/1R 

ABORT 
RTLS: 
TAL: 
AO A: 
ATO: 

HDW/FUNC 

3/1R 

3/1R 

3/1R 

3/1R 

REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION: UPPER CREW AREA 

PART NUMBER: 

V 

- 

CAUSES: CONTAMINATION/ DEBRIS 

■ 



EFFECTS/RATIONALE : 

LOSS OF MONITORING CAPABILITY. REDUNDANT HARDWARE WOULD NOT BE 
ACCESSIBLE DURING PERIODS OF ANTICIPATED HIGH 
ACCELERATION/DEACCELERATION FORCES. 

ie. 1. LIFT-OFF THROUGH MAIN ENGINE CUT-OFF - APPROXIMATELY 8 MIN 
40 SEC; 2. ENTRY THROUGH SAFEING -APPROXIMATELY 400,000ft (TD -40 
MIN) THROUGH SAFEING. 


REFERENCES : 


REPORT DATE 12/20/86 


E-85 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

311 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: POWER SUPPLIES 

FAILURE MODE: NO OUTPUT/ERRONEOUS/ERRATIC OUTPUT 


LEAD ANALYST: H J LOWERY SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) MULTIFUNCTIONAL CRT DISPLAY SYSTEM (MCDS) 

3) DEU 

4) POWER SUPPLIES (+/"5, 12 & 15 VDC) 

5) 

6 ) 

7) 

8 ) 

9) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

3/ir r 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/1R 

AO A: 

3/IR 

DEORBIT: 

3/1R 

ATO: 

3/IR 

. LANDING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: UPPER CREW AREA' 

PART NUMBER: 


CAUSES: CONTAMINATION/ DEBRIS 

EFFECTS/RATIONALE: 

LOSS OF MONITORING CAPABILITY. REDUNDANT HARDWARE WOULD NOT BE 
ACCESSIBLE DURING PERIODS OF ANTICIPATED HIGH 
ACCELERATION/DEACCELERATION FORCES. 

ie. 1. LIFT-OFF THROUGH MAIN ENGINE CUT-OFF - APPROXIMATELY 8 MIN 
40 SEC; 2. ENTRY THROUGH SAFEING -APPROXIMATELY 400,000ft (TD -40 
MIN) THROUGH SAFEING. 


REFERENCES : 


REPORT DATE 12/20/86 


E-86 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

312 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: RPC 

FAILURE MODE: OPEN/CLOSED/PREMATURE OPERATION 

LEAD ANALYST: H J LOWERY SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 


1 ) 

2 ) 

3) 

4) 

5) 

6 ) 

7) 

8 ) 

9) 


DPS 

MULTIFUNCTIONAL 

DEU 

RPC 


CRT DISPLAY SYSTEM (MCDS) 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/S AFING: 


CRITICALITIES 
HDW/FUNC ABORT 


3/2R 

3/1R 

3/1R 

3/1R 

3/1R 


RTLS: 
TAL: 
AO A: 
ATO: 


HDW/FUNC 

3/1R 

3/1R 

3/1R 

3/1R 


REDUNDANCY SCREENS: A [ 1 ] B [ P ] 


C [ P ] 


LOCATION: UPPER CREW AREA 

PART NUMBER: 


CAUSES: TEMPERATURE STRESS/ MECHANICAL FRACTURE/ CONTAMINATION/ 

DEBRIS 


EFFECTS/RATIONALE : 

LOSS OF MONITORING CAPABILITY. REDUNDANT HARDWARE WOULD NOT BE 
ACCESSIBLE DURING PERIODS OF ANTICIPATED HIGH 
ACCELERATION/DEACCELERATION FORCES. 

ie. 1. LIFT-OFF THROUGH MAIN ENGINE CUT-OFF - APPROXIMATELY 8 MIN 
40 SEC; 2. ENTRY THROUGH SAFEING -APPROXIMATELY 400,000ft (TD -40 
MIN) THROUGH SAFEING. 


REFERENCES : 


o 


REPORT DATE 12/20/86 


E-87 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

313 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: LOAD SWITCH 

FAILURE MODE: OPEN/CLOSED/PREMATURE OPERATION 

LEAD ANALYST: H J LOWERY SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) MULTIFUNCTIONAL CRT DISPLAY SYSTEM (MCDS) 

3) DEU 

4) LOAD SWITCH 

5) 

6 ) 


7) 

8 ) 
9) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

PRE LAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AO A: 

DEORBIT: 

3/3 

ATO: 

LANDING/S AFING: 

3/3 



HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY SCREENS: A [NA ] 


B [NA ] 


C [NA ] 


LOCATION: UPPER CREW AREA 

PART NUMBER: 


CAUSES: MECHANICAL FRACTURE/ CONTAMINATION/ DEBRIS 


EFFECTS/RATIONALE : 

DEUS ARE NOT NORMALLY RELOADED DURING A MISSION. SWITCH IS NOT 
NEEDED. 


REFERENCES : 


o 


REPORT DATE 12/20/86 


E-88 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

314 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: FUNCTION SWITCH 

FAILURE MODE: OPEN/CLOSED/PREMATURE OPERATION 


LEAD ANALYST: H J LOWERY SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) MULTIFUNCTIONAL CRT DISPLAY SYSTEM (MCDS) 

3) DEU 

4) FUNCTION SWITCH 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/2R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/1R 

AO A: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 
REDUNDANCY SCREENS: 

3/1R 
A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: UPPER CREW AREA 

PART NUMBER: 


CAUSES: MECHANICAL FRACTURE/ CONTAMINATION/ DEBRIS 

EFFECTS/RATIONALE : 

IMPROPER MAJOR FUNCTION IDENTIFICATION 


REFERENCES : 


REPORT DATE 12/20/86 


E-89 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

315 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: DATA BUS COUPLER (DBC) 

FAILURE MODE: OPEN/SHORT 


LEAD ANALYST: H J LOWERY SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) MULTIFUNCTIONAL CRT DISPLAY SYSTEM (MCDS) 

3) DBC 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/2R 

RTLS: 

3/lR •' 

LIFTOFF: 

3/1R 

TAL: 

3/lR 

ONORBIT: 

3/lR 

AOA: 

3/lR 

DEORBIT: 

3/1R 

ATO: 

3/lR 

LANDING/SAFING: 

3/lR 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C fP ] 


LOCATION: ALL AV BAYS 

PART NUMBER: 


CAUSES: MECHANICAL FRACTURE/ CONTAMINATION/ DEBRIS 


EFFECTS/RATIONALE: 

LOSS OF DATA BUS. REDUNDANT HARDWARE WOULD NOT BE ACCESSIBLE 
DURING PERIODS OF ANTICIPATED HIGH ACCELERATION/DEACCELERATION 
FORCES • 

ie. 1. LIFT-OFF THROUGH MAIN ENGINE CUT-OFF - APPROXIMATELY 8 MIN 
40 SEC? 2. ENTRY THROUGH SAFEING -APPROXIMATELY 400,000ft (TD -40 
MIN) THROUGH SAFEING. 


REFERENCES : 


REPORT DATE 12/20/86 


E-90 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

316 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/2R 

ABORT: /NA 


ITEM: DBIA 

FAILURE MODE: OPEN/SHORT/ERRONEOUS/ERRATIC OUTPUT 


LEAD ANALYST: H J LOWERY 


SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

MULTIFUNCTIONAL CRT DISPLAY SYSTEM (MCDS) 
DBIA 


2 ) 

3) 

4) 

5) 

6 ) 

7) 

8 ) 
9 ) 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 
HDW/FUNC ABORT 


3/2R 

3/2R 

/NA 

/NA 

/NA 


RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY SCREENS: A [ 1 ] 

LOCATION: AV BAY 5 

PART NUMBER: 


B [NA ] 


HDW/FUNC 

3/2R 

/NA 

/NA 

/NA 


C [ P ] 


CAUSES: MECHANICAL FRACTURE/ CONTAMINATION/ DEBRIS 

EFFECTS/RATIONALE : 

LOSS OF ONE COMMAND/ DATA PATH 


REFERENCES : 


REPORT DATE 12/20/86 


E-91 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/27/86 

DPS 

317 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: RESISTOR 

FAILURE MODE: OPEN 


LEAD ANALYST: H J LOWERY 

SUBSYS LEAD: B. 

ROBB 

BREAKDOWN HIERARCHY: 




1) 

EPD&C 




2) 

DPS&C 




3) 

MCDS 




4) 

RESISTOR 




5) 





6) 





7) 





8) 





9) 







CRITICALITIES 



FLIGHT PHASE* 

HDW/FUNC 

ABORT 

HDW/FUNC 


PRE LAUNCH: 

3/3 

RTLS: 

3/3 


LIFTOFF: 

3/3 

TAL: 

3/3 


ONORBIT: 

3/3 

AO A: 

3/3 


DEORBIT: 

3/3 

ATO: 

3/3 


LANDING/S AFING: 

3/3 




REDUNDANCY SCREENS: A [NA ] B [NA ] C [NA ] 

LOCATION: • 

PART NUMBER: 


CAUSES: THERMAL STRESS, CONTAMINATION 

EFFECTS/RATIONALE : 

NO EFFECT. POWER TO MCDS IS NEITHER AFFECTED NOR INTERRUPTED. 
RESISTOR PROVIDES SIGNAL THAT INDICATES THE MCDS (DEU/DU) POWER 
STATUS "ON" OR "STBY". THE MDM (OF4) WILL INTERPRET NO SIGNAL AS 
POWER "OFF" CONDITION. 


REFERENCES : 


REPORT DATE 12/20/86 


E-92 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/27/86 

DPS 

318 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: RPC 

FAILURE MODE: PREMATURE OPERATION 


LEAD ANALYST: H J LOWERY SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) MCDS 

3) DU 

4) RPC 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO A: 

3/3 

DEORBIT: 
LANDING/S AFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION : 
PART NUMBER: 


CAUSES: MECHANICAL FRACTURE/ CONTAMINATION/DEBRIS 

EFFECTS/RATIONALE : 

NONE. DU WILL HAVE POWER APPLIED PREMATURELY. 


REFERENCES : 


REPORT DATE 12/20/86 


E-93 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

319 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: SWITCH, CRT POWER 

FAILURE MODE: PREMATURE OPERATION 


LEAD ANALYST: H J LOWERY SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) MULTIFUNCTIONAL CRT DISPLAY SYSTEM (MCDS) 

3) DU 

4) SWITCH, CRT POWER 

5) 

6) 

7) 

8) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 
LANDING/ SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION; 
PART NUMBER: 


CAUSES: MECHANICAL FRACTURE, CONTAMINATION 

EFFECTS/RATIONALE : 

NONE. DU WILL HAVE POWER APPLIED PREMATURELY. 


REFERENCES : 


REPORT DATE 12/20/86 


E-94 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

320 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: RPC 

FAILURE MODE: PREMATURE OPERATION 


LEAD ANALYST: H J LOWERY SUBSYS LEAD: B. ROBB 

BREAKDOWN HIERARCHY: 

1) DPS 

2) MULTIFUNCTIONAL CRT DISPLAY SYSTEM (MCDS) 

3) DEU 

4) CONTROLLER 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 

LOCATION: 
PART NUMBER: 





CAUSES: TEMPERATURE STRESS/MECHANICAL 

FRACTURE/CONTAMINATION/DEBRIS 

EFFECTS/RATIONALE : 

NONE. DEU WILL HAVE POWER APPLIED PREMATURELY. 


REFERENCES : 


REPORT DATE 12/20/86 


E-95 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

DPS 

321 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: DIODE, SUPPRESSOR 

FAILURE MODE: FAILS SHORTED 

LEAD ANALYST: H J LOWERY SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 


1) 

DPS 


2) 

MCDS 


3) 

DEU 


4) 

DIODE, SUPPRESSOR 



5) 



6) 



7) 



3) 


m 

9) 





CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 


LANDING/SAFING: 3/3 

REDUNDANCY SCREENS: A [NA ] B [NA ] C [NA ] 

LOCATION : 

PART NUMBER: 

CAUSES: THERMAL STRESS, CONTAMINATION, DEBRIS 


EFFECTS/RATIONALE : 

LACK OF SUPPRESSION OF DEU TO MDM REVERSE TRANSIENTS WOULD ENABLE 
PREMATURE "ON" INDICATION OF THE DEU. 


REFERENCES: FMEA-05-6S-BDI01-1. NASA JSC FMEA & CIL REVIEW 

COMMENTS . 


REPORT DATE 12/20/86 


E-96 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/10/86 

DPS 

322 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: SWITCH, CRT POWER 

FAILURE MODE: SHORT TO GROUND 


LEAD ANALYST: H J LOWERY 


SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) MCDS 

3) DU 

4) SWITCH, CRT POWER 

5) 

6 ) 

7) 

8 ) 

9) 


CRITICALITIES 


FLIGHT PHASE 
PRE LAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


HDW/FUNC 

3/1R 

3/1R 

3/1R 

3/1R 

3/1R 


ABORT 
RTLS: 
TAL: 
AO A: 
ATO: 


HDW/FUNC 

3/1R 

3/1R 

3/1R 

3/1R 


REDUNDANCY SCREENS: 


A [ 1 ] 


B [ P ] 


C [ P ] 


LOCATION: 
PART NUMBER: 


CAUSES: MECHANICAL SHOCK, CONTAMINATION, DEBRIS 

EFFECTS/RATIONALE : 

ACTIVATION OF ASSOCIATED OVERLOAD PROTECTIVE CIRCUITS. LOSS OF 
DU. 


REFERENCES: FMEA 05-6Q-2201-3. NASA-JSC FMEA & CIL REVIEW 

COMMENTS, 9-11-86. 


REPORT DATE 12/20/86 


E-97 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

400 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/2R 

ABORT: 3/2R 


ITEM: Tape transport mechanism 

FAILURE MODE: Loss of Output 

LEAD ANALYST: K. Pietz SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

2) MASS MEMORY UNITS (MMU) 

3) Tape transport mechanism 

4 ) 

5 ) 

6 ) 

7 ) 

8 ) 

9 ) 



CRITICALITIES 

FLIGHT PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/2R 

RTLS 

LIFTOFF: 

3/2R 

TAL: 

ONORBIT: 

3/2R 

AO A: 

DEORBIT: 

/NA 

ATO: 

-LANDING/ SAFING: 

/NA 



HDW/FUNC 

/NA 

3/2R 

3/2R 

3/2R 


REDUNDANCY SCREENS: A [ 2 ] B [ P ] 


C [ P ] 


LOCATION: Av Bay 1,2 

PART NUMBER: MC 615-0005 


CAUSES: Worn tape or foreign matter on tape, Motor failure (worn 

brushes, etc.)/ Worn heads, Failure' of negator spring causing 
Tape slippage due to incorrect tension. 


EFFECTS/RATIONALE : 

If both MMUs fail, OPS 2 and 3 software cannot be loaded. 
However, OPS 3 can be uplinked or BFS engaged for entry. 


REFERENCES : 


REPORT DATE 12/20/86 


E-98 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

401 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/2R 

ABORT: 3/2R 


ITEM: Tape transport mechanism 

FAILURE MODE: Erroneous Output 


LEAD ANALYST: K. Pietz 


SUBSYS LEAD: B. Robb 


BREAKDOWN 

HIERARCHY: 

1) 

DPS 


2) 

MASS 

MEMORY UNITS (MMU) 

3) 

Tape 

transport mechanism 

4) 



5) 



6) 



7) 



8) 



9) 




CRITICALITIES 


FLIGHT PHASE 
PRE LAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 

REDUNDANCY SCREENS: 


HDW/FUNC 

3/2R 

3/2R 

3/2R 

/NA 

/NA 

A [ 2 ] 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


B [ P ] 


HDW/FUNC 

/NA 

3/2R 

3/2R 

3/2R 


C [ P ] 


LOCATION: 
PART NUMBER: 


Av Bay 1,2 
MC 615-0005 


CAUSES: Worn tape or foreign matter on tape, Tape slippage due 

to incorrect tension. 

EFFECTS/RATIONALE : 

If both MMUs fail, OPS 2 and 3 software cannot be loaded. 
However, OPS 3 can be uplinked or BFS engaged for entry. 


REFERENCES : 


REPORT DATE 12/20/86 


E-99 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

402 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/2R 

ABORT: 3/2R 


ITEM: Read electronics 

FAILURE MODE: Loss of Output 


LEAD ANALYST: K. Pietz SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 


1) 

DPS 




2) 

MASS MEMORY UNITS 

: (MMU) 



3) 

Read electronics 




4) 





5) 

6) 





7) 





8) 





9) 







CRITICALITIES 



FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 


PRE LAUNCH: 

3/2R 

RTLS: 

/NA 


LIFTOFF: 

3/2R 

TAL: 

3/2R 


ONORBIT: 

3/2R 

AO A: 

3/2R 


DEORBIT: 

/NA 

ATO: 

3/2R 


LANDING/SAFING: 

/NA 




REDUNDANCY SCREENS: A [ 2 ] B[P] C [ P ] 


LOCATION: Av Bay 1,2 

PART NUMBER: MC 615-0005 

CAUSES: Electrical failure 

EFFECTS/RATIONALE : 

If both MMUs fail, OPS 2 and 3 software cannot be loaded. 
However, OPS 3 can be uplinked or BFS engaged for entry. 


REFERENCES : 


REPORT DATE 12/20/86 


E-100 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

403 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/2R 

ABORT: 3/2R 


ITEM: Read electronics 

FAILURE MODE: Erroneous Output 


LEAD ANALYST: K. Piet 2 


SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

2) MASS MEMORY UNITS (MMU) 

3) Read electronics 

4) 

5) 

6 ) 

7) 

8 ) 

9) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

/NA 

LIFTOFF: 

3/2R 

TAL: 

3/2R 

ONORBIT: 

3/2R 

AO A: 

3/2R 

DEORBIT: 

/NA 

ATO: 

3/2R 

LANDING/SAFING: 

/NA 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 


LOCATION: Av Bay 1,2. 

PART NUMBER: MC 615-0005 


CAUSES: Electrical failure 


EFFECTS/RATIONALE : 

If both MMUs fail, OPS 2 and 3 software cannot be loaded. 
However, OPS 3 can be uplinked or BFS engaged for entry. 


REFERENCES : 


REPORT DATE 12/20/86 


E-101 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

10/03/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

DPS 

FLIGHT: 

3/2R 

MDAC ID: 

404 

ABORT: 

3/2R 

ITEM: 

MIA 



FAILURE MODE 

: Loss of 

Output 


LEAD ANALYST 

: K. Pietz 

SUBSYS LEAD: B. Robb 



BREAKDOWN HIERARCHY: 

1) DPS 

2) MASS MEMORY UNITS (MMU) 

3) MIA 

4 ) 

5 ) 

6 ) 

7 ) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

/NA 

LIFTOFF: 

3/2R 

TAL: 

3/2R 

ONORBIT: 

3/2R 

AO A: 

3/2R 

DEORBIT: 

/ NA 

ATO: 

3/2R 

LANDING/S AFING: 

/NA 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

c [ p ] 


LOCATION: Av Bay 1,2 

PART NUMBER: MC 615-0005 

CAUSES: Electrical failure 

EFFECTS/RATIONALE : 

If both MMUs fail, OPS 2 and 3 software cannot be loaded. 
However, OPS 3 can be uplinked or BFS engaged for entry. 


REFERENCES : 


REPORT DATE 12/20/86 


E-102 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

405 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/2R 

ABORT: 3/2R 


ITEM: MIA 

FAILURE MODE: Erroneous Output 


LEAD ANALYST: K. Pietz SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

2) MASS MEMORY UNITS (MMU) 

3) MIA 

4) 

5) 

6) 


7) 


8) 

9) 


FLIGHT PHASE 
PRE LAUNCH: 
LIFTOFF: . 

ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 
3/2R 
3/2R 
3/2R 
/NA 
/ NA 


ABORT 
RTLS: 
TAL: 
AO A: 
ATO: 


HDW/FUNC 

/NA 

3/2R 

3/2R 

3/2R 


REDUNDANCY SCREENS: A [ 1 ] B [ P ] 


C [ P ] 


LOCATION: Av Bay 1,2 

PART NUMBER: -MC 615-0005 


CAUSES: Electrical failure 


EFFECTS/RATIONALE : 

If both MMUs fail, OPS 2 and 3 software cannot be loaded. 
However, OPS 3 can be uplinked or BFS engaged for entry. 


REFERENCES : 


REPORT DATE 12/20/86 


E-103 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 10/03/86 

SUBSYSTEM: DPS 

MDAC ID: 406 

ITEM: Write electronics 

FAILURE MODE: Loss of Output 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/2R 

ABORT: 3/2R 


LEAD ANALYST: K. Pietz 


SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

2) MASS MEMORY UNITS (MMU) 

3) Write electronics 


CRITICALITIES 


FLIGHT PHASE ’ 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 

REDUNDANCY SCREENS: 


HDW/FUNC 

3/2R 

3/2R 

3/2R 

/NA 


A [ 2 1 


ABORT 
RTLS: 
TAL: 
AO A: 
ATO: 


B [ P ] 


HDW/FUNC 

/NA 


3/2R 

3/2R 


C [ P ] 


LOCATION: ■ ' Av Bay 1,2 

PART 'NUMBER: MC 615-0005 

CAUSES: Electrical failure 

EFFECTS/RATIONALE : 

If the ability to write to MMUs were lost, the mission could be 
terminated early. No danger to crew or vehicle. 


REFERENCES : 


REPORT DATE 12/20/86 


E-104 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

10/03/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

DPS 

FLIGHT: 

3/2R 

MDAC ID: 

407 

ABORT: 

3/2R 

ITEM: 

RPC 



FAILURE MODE 

: Failed Open 



LEAD ANALYST 

': K. Pietz 

SUBSYS LEAD: B. Robb 



BREAKDOWN HIERARCHY: 

1) DPS 

2) MASS MEMORY UNITS (MMU) 

3) Power supply 

4) RPC 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

/NA 

LIFTOFF: 

3/2R 

TAL: 

3/2R 

ONORBIT: 

3/2R 

AO A: 

3/2R 

DEORBIT: 

/NA 

ATO: 

3/2R 

LANDING/ SAFING: 

/NA 



REDUNDANCY SCREENS: 

a [ i ] 

B [ p 3 

C [ P 3 


LOCATION: Av Bay 1,2 

PART NUMBER: MC 615-0005 

CAUSES: Broken contact 

EFFECTS/RATIONALE : 

If both MMUs fail, OPS 2 and 3 software cannot be loaded. 
However, OPS 3 can be uplinked or BFS engaged for entry. 


REFERENCES : 


REPORT DATE 12/20/86 


E-105 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

10/03/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

DPS 

FLIGHT: 

3/2R 

MDAC ID: 

408 

ABORT: 

3/2R 

ITEM: 

Switch 



FAILURE MODE 

: Failed Open 



LEAD ANALYST 

': K. Pietz 

SUBS YS LEAD: B. Robb 



BREAKDOWN HIERARCHY: 

1) DPS 

2) MASS MEMORY UNITS (MMU) 

3) Power supply 

4) Switch 

5) 

6 ) 

7) 

8 ) 

9) 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF:’ 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/2R 

RTLS 

3/2R 

TAL: 

3/2R 

AO A: 

/NA 

ATO: 

/NA 



HDW/FUNC 

/NA 

3/2R 

3/2R 

3/2R 


REDUNDANCY SCREENS: A [ 1 ] B [ P ] 


C [ P ] 


LOCATION: Av Bay 1,2 

PART NUMBER: MC 615-0005 


CAUSES: Broken contact 


EFFECTS/RATIONALE : 

If both MMUs fail, OPS 2 and 3 software cannot be loaded. 
However, OPS 3 can be uplinked or BFS engaged for entry. 


REFERENCES : 


REPORT DATE 12/20/86 


E-106 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

10/03/86 


HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

DPS 


FLIGHT: 

3/3 

MDAC ID: 

409 


ABORT: 

3/3 

ITEM: 

Switch 




FAILURE MODE 

!: Failed Closed 

(on) 



LEAD ANALYST 

': K. Pietz 

SUBSYS 

LEAD: B. Robb 



BREAKDOWN HIERARCHY: 

1) DPS 

2) MASS MEMORY UNITS (MMU) 

3) Power supply 

4) Switch 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

‘ 3/2R 

RTLS: 

/NA 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO A: 

3/3 

DEORBIT: 

/NA 

ATO: 

3/3 

LANDING/S AFING: 
REDUNDANCY SCREENS: 

/NA 
A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: Av Bay 1,2 

PART NUMBER: MC 615-0005 


CAUSES: Stray particle 

EFFECTS/RATIONALE : 

None 


REFERENCES : 


REPORT DATE 12/20/86 


E-107 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

410 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/2R 

ABORT: 3/2R 


ITEM: Control logic 

FAILURE MODE: Loss of Output 


LEAD ANALYST: K. Pietz SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

2) MASS MEMORY UNITS (MMU) 

3) Control logic 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

/NA 

LIFTOFF: 

3/2R 

TAL: 

3/2R 

ONORBIT: 

3/2R 

AO A: 

3/2R 

DEORBIT: 

/NA 

ATO: 

3/2R 

LANDING/ SAFING: 

/NA 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 


LOCATION: Av Bay 1,2 

PART NUMBER: MC 615-0005 


CAUSES: Electrical failure 


EFFECTS/RATIONALE : 

If both MMUs fail, OPS 2 or 3 software cannot be loaded. 
However, OPS 3 can be uplinked or BFS engaged for entry. 


REFERENCES : 


REPORT DATE 12/20/86 


E-108 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

HDW/FUNC 
3/2R 
3/2R 

ITEM: Control logic 

FAILURE MODE: Erroneous Output 

LEAD ANALYST: K. Pietz SUBSYS LEAD: B. Robb 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

411 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


BREAKDOWN HIERARCHY: 

1) DPS 

2) MASS MEMORY UNITS (MMU) 

3) Control logic 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

/NA 

LIFTOFF: 

3/2R 

TAL: 

3/2R 

ONORBIT: 

3/2R 

AOA: 

3/2R 

DEORBIT: 

/ NA 

ATO: 

3/2R 

LANDING/SAFING 

: /NA 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION: Av Bay 

1,2 

V 


PART NUMBER: MC 615- 

0005 



CAUSES: Electrical failure 




EFFECTS/RATIONALE : 

If both MMUs fail, OPS 2 or 3 software cannot be loaded. 
However, OPS 3 can be uplinked or BFS engaged for entry. 


REFERENCES : 


REPORT DATE 12/20/86 E-109 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

412 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/2R 

ABORT: 3/2R 


ITEM: Power supply 

FAILURE MODE: Fails out of tolerance or Interrupt 


LEAD ANALYST: K. Pietz SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

2) MASS MEMORY UNITS (MMU) 

3) Power supply 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

/NA 

LIFTOFF: 

3/2R 

TAL: 

3/2R 

ONORBIT: 

3/2R 

AO A: 

3/2R 

DEORBIT: 

/NA 

ATO: 

3/2R 

LANDING/ SAFING: 

/NA 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

c [ p ] 


LOCATION: , Av Bay 1,2 

PART NUMBER: MC 615-0005 


CAUSES: Electrical failure 

EFFECTS/RATIONALE : 

If both MMUs fail, OPS 2 and 3 software cannot be loaded. 

However, OPS 3 can be uplinked or BFS engaged for entry. Neither 
of these options require the use of MMUs. 


REFERENCES : 


REPORT DATE 12/20/86 


E-110 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10 / 20/86 

DPS 

413 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/2R 

ABORT: 3/2R 


ITEM: RESISTOR, CURRENT LIMITER 

FAILURE MODE: FAILS OPEN 


LEAD ANALYST: B. ROBB SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) MASS MEMORY UNIT (MMU) 

3) POWER DISTRIBUTION 

4) RESISTOR, CURRENT LIMITER 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

3/2R 

LIFTOFF: 

3/2R 

TAL: 

3/2R 

ONORBIT: 

3/2R 

AO A: 

3/2R 

DEORBIT: 

3/2R 

ATO: 

3/2R 

LANDING/ SAFING: 
REDUNDANCY SCREENS: 

3/2R 
A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION : 
PART NUMBER: 


CAUSES: VIBRATION, SHOCK, PIECE PART FAILURE 

EFFECTS/RATIONALE : 

LOSS CONTROL AND USE OF ONE MMU. LOAD GPC OR MCDS WITH REMAINING 
GOOD MMU. 


REFERENCES : 


REPORT DATE 12/20/86 


E-lll 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/30/86 

DPS 

414 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/2R 

ABORT: 3/2R 


ITEM: CONTROLLER, REMOTE POWER 

FAILURE MODE: LOSS OF OUTPUT 


LEAD ANALYST: H J LOWERY 

BREAKDOWN HIERARCHY: 

1) DPS 

2) MMU 

3) CONTROLLER, REMOTE POWER 

4) 

5) 

6 ) 

7) 

8 ) 

9) 


SUBSYS LEAD: B. ROBB 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

3/2R 

LIFTOFF: 

3/2R 

TAL: 

3/2R 

ONORBIT: 

3/2R 

AO A: 

3/2R 

DEORBIT: 

3/2R 

ATO: 

3/2R 

LANDING/S AFING: 

3/2R 



REDUNDANCY SCREENS: 

A c 1 3 

B [ P ] 

c [ P 3 


LOCATION: 

PART NUMBER: 

CAUSES: TEMPREATURE STRESS, MECHANICAL FRACTURE, CONTAMINATION, 

DEBRIS 

EFFECTS/RATIONALE : 

NONE. BFS GPC AND A FROZEN PRIMARY GPC DO NOT REQUIRE IPL OR 
OVERLAY DURING ORBIT BEFORE ENTRY. 


REFERENCES: FMEA NO. 05-6S-BRPC2-1. NASA-JSC FMEA CIL REVIEW 

COMMENTS . 


REPORT DATE 12/20/86 


E-112 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

10/03/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

DPS 

FLIGHT: 

3/3 

MDAC ID: 

415 

ABORT: 

3/3 

ITEM: 

IPL Source Switch 



FAILURE MODE 

: Fails open 



•LEAD ANALYST 

': T, B. Cribbs 

SUBSYS LEAD: B. Robb 



BREAKDOWN HIERARCHY: 

1) DPS 

2) General Purpose Computer (GPC) 

3) Central Processing Unit (CPU) 

4) MMU Initial Program Load (I PL) Source Switch 

5) 

6 ) 

7) 

8 ) 

9) 



CRITICALITIES 

FLIGHT PHASE 

HDW/FUNC 

ABORT 

PRE LAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AO A: 

DEORBIT: 

3/3 

ATO: 

LANDING/S AFING: 

3/3 



HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY SCREENS: A [NA 


B [NA ] C [NA ] 


LOCATION: Panel 06 

PART NUMBER: 


CAUSES: IPL selector switch is shorted or power source is lost 

due to contamination 


EFFECTS/RATIONALE : 

IPL source switch is used at pre- launch to initialize GPC's. This 
failure could cause loss of a mission opportunity due to launch 
delay. During flight the GPC's are not typically re-IPL'ed, even 
though the MMU is used to retrieve new memory overlays (as 
opposed to the IPL loading the entire system software, including 
MCDS initialization). 


REFERENCES: JSC 18820, JSC 11174, JSC 12770 


REPORT DATE 12/20/86 


E-113 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/10/86 

DPS 

416 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: CONTROLLER, REMOTE POWER 

FAILURE MODE: PREMATURE OPERATION 


LEAD ANALYST: T. B. Cribbs SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 

1) DPS 

2) MMU 

3) CONTROLLER, REMOTE POWER 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/2 ■" 

ONORBIT: 

3/3 

AO A: 

3/3 

DEORBIT: 
LANDING/S AFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION : 
PART NUMBER: 


CAUSES: MECHANICAL SHOCK, CONTAMINATION, DEBRIS 

EFFECTS/RATIONALE : 

NO EFFECT. PREMATURE TURN ON. 


REFERENCES: 05-6S-BRPC2-1. NASA-JSC FMEA & CIL REVIEW COMMENTS, 

9-19-86. 


REPORT DATE 12/20/86 


E-114 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/10/86 

DPS 

417 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/2R 

ABORT: 3/2R 


ITEM: SWITCH, IPL 

FAILURE MODE: SWITCH SHORT, BOTH IPL OUTPUTS ARE TRUE. 

LEAD ANALYST: H J LOWERY SUBSYS LEAD: B. Robb 


BREAKDOWN HIERARCHY: 


1) 

DPS 

2) 

MMU 

3) 

SWITCH 

4) 


5) 


6) 


7) 


8) 


9) 



CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/2R 

RTLS: 

3/2R 

LIFTOFF: 

3/2R 

TAL: 

3/2R 

ONORBIT: 

3/2R 

AOA: 

3/2R 

DEORBIT: 

3/2R 

ATO: 

3/2R 

LANDING/SAFING: 
REDUNDANCY SCREENS: 

3/2R 
A [ 1 ] 

B [ P ] 

c [ p 3 


LOCATION: 
PART NUMBER: 


CAUSES: MECHANICAL SHOCK, CONTAMINATION, DEBRIS 

EFFECTS/RATIONALE : 

LOSS OF GPC IF IN HALT MODE. 


REFERENCES: 05-5-B16-1-1. NASA-JSC FMEA & CIL REVIEW COMMENTS, 

9-19-86. 


c-y 


REPORT DATE 12/20/86 


E-115 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

501 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM: CIA 

FAILURE MODE: LOSS OF OUTPUT TO MAIN ENGINE ON ONE CHANNEL 

LEAD ANALYST: B. ROBB SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) ENGINE INTERFACE UNIT (EIU) 

3) CONTROLLER INTERFACE ADAPTER 

4) 

5) 

6) 

7) 

8 ) 

9) 


CRITICALI TIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/2R 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

/NA 

AOA: 

3/1R 

DEORBIT: 

/NA 

ATO: 

3/1R 

LANDING/ SAFING 

: /NA 

- 


REDUNDANCY SCREENS: 

A [ 1 ] . 

B [ P ] 

C [ P ] 

LOCATION: . AV BAY 

PART NUMBER: 

4,5,6 


• 


CAUSES: CONTROLLER INTERFACE ADAPTER FAILS 


EFFECTS/RATIONALE : 

LOSS OF THROTTLE COMMANDS, SHUTDOWN COMMANDS, LIMIT 
INHIBIT/ENABLE COMMANDS, GPC SHUTDOWN COMMANDS, AND MPS DUMP 
COMMANDS . 

LOSS OF ONE OF THREE COMMAND PATHS WILL BE VOTED INVALID. NO 
EFFECT ON ENGINE OPERATIONS. 


REFERENCES : 


REPORT DATE 12/20/86 


E-116 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

502 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM: MIA 

FAILURE MODE: LOSS OF OUTPUT TO MAIN ENGINE ON ONE CHANNEL 


LEAD ANALYST: B. ROBB SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) ENGINE INTERFACE UNIT (EIU) 

3) MULTIPLEXER INTERFACE ADAPTER 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 
PRE LAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 


HDW/FUNC 

3/2R 

3/1R 

/NA 

/NA 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/1R 

3/1R 

3/1R 

3/1R 


LANDING/S AFING: /NA 


REDUNDANCY SCREENS: 


A [ 1 ] 


B [ P ] 


C [ P ] 


LOCATION: 
PART NUMBER: 


AV BAY 4,5,6 


CAUSES: MULTIPLEXER INTERFACE ADAPTER FAILS 


EFFECTS/RATIONALE : 

LOSS OF THROTTLE COMMANDS, SHUTDOWN COMMANDS, LIMIT 
INHIBIT/ENABLE COMMANDS, GPC SHUTDOWN COMMANDS, AND MPS DUMP 
COMMANDS . 

LOSS OF ONE OF THREE COMMAND PATHS WILL BE VOTED INVALID. NO 
EFFECT ON ENGINE OPERATIONS. 


REFERENCES : 


REPORT DATE 12/20/86 


E-117 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

503 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM: POWER CONTROL SWITCH 

FAILURE MODE: LOSS OF OUTPUT TO MAIN ENGINE ON ANY OF THREE 

COMMAND CHANNELS 


LEAD ANALYST: B. ROBB SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) ENGINE INTERFACE UNIT 

3) POWER CONTROL SWITCH 

4) 

5) 

6 ) 

7) 

8 ) 

9) 


(EIU) 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/2R 

3/1R 

/NA 

/NA 

/NA 


ABORT 
RTLS: 
TAL: 
AO A: 
ATO: 


HDW/FUNC 

3/1R 

3/1R 

3/1R 

3/1R 


REDUNDANCY SCREENS: A [ 1 ] B [ P ] 


C [ P ] ' 


LOCATION: AV BAY 4,5,6 

PART NUMBER: 


CAUSES: EIU POWER CONTROL SWITCH FAILS OPEN 

EFFECTS/RATIONALE : 

LOSS OF ALL COMMANDS AND STATUS OF THE ENGINE FOR THIS FAILURE 
MODE 

THE LOSS OF THE ENTIRE EIU WILL RESULT IN ENGINE SHUTDOWN BY CREW 
BY SWITCHING AC POWER TO THE ENGINE TO OFF POSITION. 


REFERENCES : 


REPORT DATE 12/20/86 


E-118 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

504 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM: INTERNAL POWER SUPPLIES 

FAILURE MODE: LOSS OF OUTPUT TO MAIN ENGINE ON ANY OF THREE 

COMMAND CHANNELS 


LEAD ANALYST: B. ROBB SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) ENGINE INTERFACE UNIT (EIU) 

3) INTERNAL POWER SUPPLIES 

4) 

5) 

6) 

7) 

8 ) 

9) 


CRITICALITIES 


FLIGHT PHASE 
PRE LAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


HDW/FUNC 

3/2R 

3/1R 

/NA 

/NA 

/NA 


ABORT 
RTLS: 
TAL: 
AO A: 
ATO: 


REDUNDANCY SCREENS: 


A [ 1 ] 


B [ P ] 


HDW/FUNC 

3/1R 

3/1R 

3/1R 

3/1R 


C [ P ] 


LOCATION: ' AV BAY 4,5,6 

PART NUMBER: 


CAUSES: INTERNAL POWER SUPPLIES FAIL 


EFFECTS/RATIONALE : 

LOSS OF THROTTLE COMMANDS, SHUTDOWN COMMANDS, LIMIT 
INHIBIT/ENABLE COMMANDS, GPC SHUTDOWN COMMANDS, AND MPS DUMP 
COMMANDS . 

THE LOSS OF THE ENTIRE EIU WILL RESULT IN ENGINE SHUTDOWN BY CREW 
BY SWITCHING AC POWER TO THE ENGINE TO OFF POSITION. 


REFERENCES : 


REPORT DATE 12/20/86 


E-119 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

505 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: CONTROLLER INTERFACE ADAPTER 

FAILURE MODE: LOSS OF OUTPUT TO ONE OR THREE GPC ON STATUS OF 

ENGINES . 


LEAD ANALYST: B. ROBB 


SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) ENGINE INTERFACE UNIT (EIU) 

3) CONTROLLER INTERFACE ADAPTER 

4) 

5) 


6) 

7) 

8 ) 
9) 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 
HDW/FUNC ABORT 


3/2R 

3/1R 

/NA 

/NA 

/NA 


RTLS: 
TAL: 
AO A: 
ATO: 


HDW/FUNC 

3/1R 

3/1R 

3/1R 

3/1R 


REDUNDANCY SCREENS: A [ 1 ] B [ P ] C [ P ] 

LOCATION: “ AV BAY 4,5,6 

PART NUMBER: 


CAUSES: CONTROLLER INTERFACE ADAPTER FAILURE 


EFFECTS/RATIONALE : 

NO MAIN ENGINE MONITORING BY ONE OR THREE OF FOUR GPCS. MCC 
CONFIRMS COMMAND PATH GOOD BY MONITORING 3-G THROTTLE CONTROL. IF 
ENGINE IS NOT OPERATING, THE PUSHBUTTON FOR THE ENGINE MUST BE 
USED TO INFORM GUIDANCE FOR PRE VALVE CLOSURES. 

FLIGHT RULE 2-17 PRECLUDES RESTRINGING DURING POWERED ASCENT 
THROUGH MECO. 


REFERENCES : 


REPORT DATE 12/20/86 


E-120 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

DPS 

506 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/1R 


ITEM: OIE 

FAILURE MODE: LOSS OF OUTPUT TO S-BAND, MAINTENANCE RECORDER, OR 

LPS T-0 UMBILICAL 

LEAD ANALYST: B. ROBB SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) ENGINE INTERFACE UNIT (EIU) 

3) OPERATIONAL INTERFACE ELEMENT 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/2R 

RTLS: 

3/1R 

LIFTOFF: 

3/3 

TAL: 

3/1R 

ONORBIT: 

/NA 

AOA: 

3/1R 

DEORBIT: 

/NA 

ATO: 

3/1R 

LANDING/ SAFING : 

/NA 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AV BAY 4,5,6 

PART NUMBER: 


CAUSES: OPERATIONAL INTERFACE ELEMENT FAILURE 

EFFECTS/RATIONALE : 

NO FM DATA RECORDING, NO MCC STATUS MONITORING OF ENGINE EXCEPT 
IN DOWNLIST DATA FROM GPC. 


REFERENCES : 


REPORT DATE 12/20/86 


E-121 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10 / 20/86 

DPS 

507 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: CIRCUIT, EIU POWER 

FAILURE MODE: ALL CREDIBLE MODES, OPEN, SHORTS 

LEAD ANALYST: B. ROBB SUBSYS LEAD: B. ROBB 


BREAKDOWN HIERARCHY: 

1) DPS 

2) ENGINE INTERFACE UNIT (EIU) 

3) POWER DISTRIBUTION 

4) CIRCUIT, EIU POWER 

5) 

6 ) 

7) 

8) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

. HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R - 

ONORBIT: 

/ 

AO A: 

2/1R 

DEORBIT: 

/ 

ATO: 

2/1R 

LANDING/S AFING: 

/ 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ F ] 

c [ p 3 

LOCATION : 


X 


PART NUMBER: 





CAUSES: PIECE PART FAILURE, SHOCK, VIBRATION 


EFFECTS/RATIONALE : 

THE LOSS OF ONE OF TWO REDUNDANT CIRCUITS WILL NOT EFFECT THE 
EIU. THE LOSS OF BOTH CIRCUITS WILL CAUSE LOSS OF EIU TO MAIN 
ENGINE INTERFACE. MAIN ENGINE WOULD HAVE TO BE MANUALLY SHUT 
DOWN AT MECO. 


REFERENCES : 


REPORT DATE 12/20/86 


E-122 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

11/03/86 

HIGHEST 

CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

DPS 


FLIGHT: 

1/1 

MDAC ID: 

508 


ABORT: 

1/1 

ITEM: 

EIU 




FAILURE MODE 

: ERRONEOUS 

OUTPUT 



LEAD ANALYST 

: H J LOWERY 

SUBSYS LEAD: 

B. ROBB 



BREAKDOWN HIERARCHY: 

1) DPS 

2) EIU 

3) 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

/NA 

AO A: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

/NA 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ F ] 

C [ P ] 


LOCATION: 

PART NUMBER: 

CAUSES: THERMAL STRESS, CONTAMINATION, DEBRIS 


EFFECTS/RATIONALE : 

ERRONEOUS OUTPUT MAY CAUSE THE GPC'S TO THINK THAT THE ENGINE HAS 
SHUT DOWN OR THE ENGINE TO CHANGE ITS THROOTLE SETTING, EITHER OF 
WHICH COULD BE CATASTROPHIC. 


REFERENCES: NAS A- JSC FMEA & CIL REVIEW COMMENTS. 


■o 


REPORT DATE 12/20/86 


E-123 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

DPS 

509 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 1/1 

ABORT: 1/1 


ITEM: SWITCH, POWER 

FAILURE MODE: SHORT BOTH CONTACTS TO GROUND 


LEAD ANALYST: H J LOWERY SUBSYS LEAD: B. ROBB 

BREAKDOWN HIERARCHY: 

1) DPS 

2) EIU 

3) SWITCH, POWER 

4) 

5) 

6) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

/NA 

AO A: 

/NA 

DEORBIT: 

/ NA 

ATO: 

/NA 

LANDING/SAFING: 

/NA 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ F ] 

C [ P ] 


LOCATION: 

PART NUMBER: 

CAUSES: THERMAL STRESS, CONTAMINATION,. DEBRIS 


EFFECTS/RATIONALE : 

LOSS OF SWITCH CAUSES LOSS OF THAT EIU. LOSS OF EIU CAUSES LOSS 
OF COMMAND CAPABILITY TO THAT MAIN ENGINE. RESULTS COULD BE 
CATASTROPHIC. 


REFERENCES: NASA-JSC FMEA & CIL REVIEW COMMENTS. 


REPORT DATE 12/20/86 


E-124 


APPENDIX F 

NASA FMEA TO IOA WORKSHEET CROSS REFERENCE/RECOMMENDATION 

This section provides a cross reference_ between the NASA FMEA and 
corresponding IOA analysis worksheet { s ) included in Appendix E. 
The Appendix F identifies: NASA FMEA Number, IOA Assessment 

Number, NASA criticality and redundancy screen data, and IOA 
recommendations. 


Appendix F Legend 
Code Definition 

1 IOA recommends changing the second failure mode 
described in the effects field. 

2 IOA recommends deleting the IOA failure mode. 


F-l 



APPENDIX F 

NASA FMEA TO 10A WORKSHEET CROSS REFERENCE / RECOMMENDATIONS 


f IDENTIFIERS j 

NASA 

IOA RECOMMENDATIONS I 


1 

| NASA 

IOA 

CRIT 

SCREEN 

CRIT 

SCREEN 

OTHER 

ISSUE 

m 

FMEA NO: 

ASSESSMENT 

HW/F 

ABC 

HW/F 

ABC 

(SEE LEGEND CODE) 
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APPENDIX F 

NASA FMEA TO IDA WORKSHEET CROSS REFERENCE / RECOMMENDATIONS 


\ * IDENTIFIERS j 

NASA | 

IOA RE 

COMMENDATIONS * 


1 NASA 

IOA | 


SCREEN | 

W' 

5CREEN 

OTHER 

ISSUE 

3 FMEA NO: 

ASSESSMENT 
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(SEE LE5END CODE) 
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APPENDIX F 

NASA FMEA TD IDA WORKSHEET CROSS REFERENCE / RECOMMENDATIONS 


csns(sua:s3u»SH:ss«zsss 

J IDENTIFIERS 

NASA 

. 

IOA RECOMMENDATIONS I 
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(SEE LEGEND CODE) 
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| 05-6S-BRPC3-1 

DPS— 1 9 1 

3 /IR 

P F P 




i 

i 

| 05-6S-BRPC3-2 

DPS-192 

3 /3 

P N P 




i 

j 05-65-BRPC4-I 

DPS-305 

3 / IR 

P P P 





j 05-6S-BRPC4-2 

DPS-31B 

3 /3 

P P P 





f 05-65-BRPC5-1 

DP5-312 

3 / IR 

P P P 





05-6S-BRPC5-2 

DPS-320 

3 /3 

P P P 





! 05-65-BSWi -I 

DPS-232 

3 /in 

P P P 





|j 05-oS-BSWl -2 

DPS-216 ' 

3 /3 

P P P 




i 

jj 05-6S-BSW1 -3 

DPS-217 

2 /IR 

P P P 




1 

8 05-6S-B5W2 -1 

DP5-40B 

3 /2R 

P P P 





| 05-6S-B5W2 -2 

DPS-409 

3 /3 

P P P 




I 

j 05-6S-BSW3 -1 

DPS-193 

3 /IR 

P F P 





j 05-6S-BSN3 -2 

DPS-194 

3 /3 

P N P 





05-AS-BSW4 -1 

DPS-312B 

3 / IR 

P P P 





05-&S-BSW4 -2 

DPS-319 

3 /3 

P P P 





05-6S-BSW4 -3 

DPS-322 

3 / IR 

P. P P 





05-6S-BSW5 -3 

DPS-195 

3 / IR 

P F P 





EIU-1 (NEW) 

DPS-50B 

1 /I 

P F P 





I EIU-2 (NEW) 

DPS-509 

1 /I 

P F P 




i 

1 MMU-1 (NEW) 

DP5-4 li 

3 /3 

N N N 





| MMU-2 (NEW) 

DPS-417 

3 /2R 

P P P 




j 

| NONE 

DP.S -104 

/ 




2 


NONE 

DPS-105 

i 




2 

| 

NONE 

DPS-124 

/ 




2 


NONE 

DPS-125 

i 




2 

j 

NONE 

DPS-144 

i 




2 


NONE 

DPS-145 

/ 




2 

! 

NONE 

DPS-1B4 

/ 




2 


NONE 

DPS-1B5 

/ 




2 


NONE 

DPS-203 

/ 




2 

! 

NONE 

DPS-207 

/ 




2 


NONE 

DPS-20B 

/ 




2 


NONE 

DPS-209 

/ 



- 

2 


NONE 

sassssssssvBiesa: 

DPS-213 

iSBSBSSSSSBil 

/ 

isssssss :: 

SSSSSSSX: 

iSSSSSSBI 


2 

kBBSSSSSBSBSSBSSSBBBSi 



sasssss»S9si»s±srsBsss 

t IF DIFFERENT FROM NASA 


F-4 
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fF QUALITY 








